CVE-2026-0320 — OS Command Injection in Palo

Vendor	Product	Version range	Fixed in
palo_alto_networks	pan-os	>= 10.2.0 < 10.2.18-h12	10.2.18-h12
palo_alto_networks	pan-os	>= 11.1.0 < 11.1.16-h3	11.1.16-h3
palo_alto_networks	pan-os	>= 11.2.0 < 11.2.16	11.2.16
palo_alto_networks	pan-os	>= 12.1.0 < 12.1.10-h2	12.1.10-h2
palo_alto_networks	pan-os	>= 12.2.0 < 12.2.4	12.2.4
paloalto	cloud_ngfw	—	—
paloalto	pan-os	—	—
paloalto	prisma_access	—	—

Red Hat

vim: Vim: Out-of-bounds Read with Text Properties

vendor_redhat·2026-06-25·CVSS 6.1

CVE-2026-57454 [MEDIUM] CWE-125 vim: Vim: Out-of-bounds Read with Text Properties vim: Vim: Out-of-bounds Read with Text Properties Vim is an open source, command line text editor. From 9.2.0320 until 9.2.0679, a crafted undo or swap file can store a virtual-text property whose offset and length point outside the line's property data. When Vim restores or displays such a line it converts the offset into a pointer and reads the virtual text without bounds checking, causing an out-of-bounds read that can crash Vim or disclose adjacent heap memory. This vulnerability is fixed in 9.2.0679. A flaw was found in Vim, an open source command-line text editor. A local attacker could exploit this vulnerability by providing a specially crafted undo or swap file. When Vim processes this file, an out-of-bounds read occurs, which can lead to the disclosure of sensitive information f

Palo Alto

PAN-OS: Authenticated Admin Command Injection Vulnerability

vendor_paloalto·CVSS 6.1

CVE-2026-0320 [MEDIUM] CWE-78 PAN-OS: Authenticated Admin Command Injection Vulnerability PAN-OS: Authenticated Admin Command Injection Vulnerability A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS management interface. The security risk posed by this issue is significantly minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines (https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431). This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtua

Citrix

Citrix Security Bulletin CTX694724

vendor_citrix·CVSS 8.6

CVE-2025-0320 [HIGH] Citrix Security Bulletin CTX694724 Citrix Security Bulletin CTX694724 CVE References: CVE-2025-0320, CVE-2025-12101, CVE-2025-62626, CVE-2026-23554, CVE-2026-3055, CVE-2026-4368, CVE-2026-4397 Affected Products: Citrix ADM, Citrix Hypervisor, Citrix Virtual Apps and Desktops, Endpoint Management, NetScaler ADC, NetScaler Gateway, XenServer

VulDB

Palo Alto Networks PAN-OS/Panorama Management Interface command injection

vuldb·2026-10-14·CVSS 6.1

CVE-2026-0320 [MEDIUM] Palo Alto Networks PAN-OS/Panorama Management Interface command injection A vulnerability was found in Palo Alto Networks PAN-OS and Panorama. It has been classified as very critical. This issue affects some unknown processing of the component Management Interface. Performing a manipulation results in command injection. This vulnerability is cataloged as CVE-2026-0320. It is possible to initiate the attack remotely. There is no exploit available.

GHSA

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user.

ghsa_unreviewed·2026-10-14

CVE-2026-0320 [MEDIUM] CWE-78 A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS management interface. The security risk posed by this issue is significantly minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma® Access are not affe

CVE-2026-0320: A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary…

Affected

CVSS provenance