# CVE-2026-0282: Palo Alto Networks PAN-OS file deletion in management web interface

Source: https://junglewise.ai/threats/cve-2026-0282-palo-alto-networks-pan-os-file-deletion-in-management-web  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-09. Updated: 2026-07-09  
License: CC BY 4.0 with a link back

CVE-2026-0282 · Severity: info · CVSS 2.7 · Published 2026-07-09

A vulnerability in Palo Alto Networks firewalls and management systems allows an unauthorized person to delete temporary files via the web management interface. While this could disrupt some system operations, it does not allow the attacker to access sensitive data or take full control of the device. The risk is significantly lower for organizations that follow best practices by restricting management access to trusted internal networks.

Technologies: [Palo Alto Networks Panorama](https://junglewise.ai/threats/technologies/panorama). Vendors: [Palo Alto Networks](https://junglewise.ai/threats/vendors/palo-alto-networks).

## Quick answers

**Is CVE-2026-0282 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-0282 being exploited in the wild.

**How severe is CVE-2026-0282?** Informational severity, with a CVSS score of 2.7, published 9 July 2026.

**Which products and versions are affected?** Palo Alto Networks Panorama All versions running affected PAN-OS releases.

**Is there a fix for CVE-2026-0282?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-0282 attacked?** It is attacked over the network, in an operating system.

**Am I affected by CVE-2026-0282?** Check whether you run Palo Alto Networks Panorama at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An improper input validation vulnerability (CWE-20) in the PAN-OS management web interface allows an unauthenticated remote attacker with network access to delete files within a temporary directory. The root cause is related to insufficient validation of user-supplied input used in file manipulation operations (CAPEC-165). While the impact is limited to temporary files, it could potentially lead to a denial-of-service condition for specific web interface functions. The vulnerability affects PA-Series, VM-Series, and Panorama platforms. Patches are available in PAN-OS versions 12.1.8, 11.2.13, and 11.1.16.

## Affected products

- Palo Alto Networks PAN-OS 12.1 < 12.1.8, 11.2 < 11.2.13, 11.1 < 11.1.16, 10.2 (all versions)
- Palo Alto Networks Panorama All versions running affected PAN-OS releases

## Timeline

- 2026-07-08: disclosed: Discovered internally by Palo Alto Networks
- 2026-07-08: advisory: Initial publication of CVE-2026-0282

## References

- [https://security.paloaltonetworks.com/CVE-2026-0282](https://security.paloaltonetworks.com/CVE-2026-0282)

## Related threats

- [Palo Alto Networks PAN-OS authenticated admin command injection](https://junglewise.ai/threats/cve-2026-0320-a-command-injection-vulnerability-in-palo-alto-networks-pan-os)
- [Palo Alto Networks PAN-OS stored XSS in web interface](https://junglewise.ai/threats/cve-2026-0316-a-stored-cross-site-scripting-xss-vulnerability-in-palo-alto)
- [Palo Alto Networks PAN-OS buffer overflow in XML processing](https://junglewise.ai/threats/cve-2026-0310-palo-alto-networks-pan-os-buffer-overflow-in-xml-processing)
- [Palo Alto Networks PAN-OS stored XSS in web interface](https://junglewise.ai/threats/cve-2026-0308-palo-alto-networks-pan-os-stored-xss-in-web-interface)
- [Palo Alto Networks PAN-OS information disclosure in management web interface](https://junglewise.ai/threats/cve-2026-0281-palo-alto-networks-pan-os-information-disclosure-in-management-web)