Disclaimer

Known affected versions were inferred from fixed-version data and were not explicitly confirmed by the vendor: 11.1.13-h10, 11.2.10-h13, 12.1.4-h5

The earliest recollection of this bug is traced back to PAN-OS 11.1.14 - August 10, 2026. This bug is fixed in PAN-OS versions 11.1.14, 11.2.11, 12.1.5. Fixed an issue where a command injection vulnerability occurred due to improper input sanitization. Fixed an issue where a command injection vulnerability could occur due to improper input sanitization. For more information: https://docs.paloaltonetworks.com/ngfw/release-notes/12-1/pan-os-12-1-5-known-and-addressed-issues/pan-os-12-1-5-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-14-known-and-addressed-issues/pan-os-11-1-14-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-11-known-and-addressed-issues/pan-os-11-2-11-addressed-issues