CVE-2026-0259

🗓️ 13 May 2026 18:05:45Reported by palo_altoType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 11 Views

Arbitrary file read/delete flaw in WildFire WF-500/WF-500-B non-FIPS default mode; update available; cloud service unaffected.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2026-0259	13 May 202618:05	–	attackerkb
Circl	CVE-2026-0259	14 May 202606:51	–	circl
CNNVD	Palo Alto Networks WildFire 安全漏洞	13 May 202600:00	–	cnnvd
Cvelist	CVE-2026-0259 WildFire WF-500 and WF-500-B: Arbitrary File Read and Delete Vulnerability in WildFire Appliance (WF-500, WF-500-B)	13 May 202618:05	–	cvelist
EUVD	EUVD-2026-30106	13 May 202621:32	–	euvd
NVD	CVE-2026-0259	13 May 202619:17	–	nvd
Positive Technologies	PT-2026-40756	13 May 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-0259	5 Jun 202619:25	–	redhatcve
Vulnrichment	CVE-2026-0259 WildFire WF-500 and WF-500-B: Arbitrary File Read and Delete Vulnerability in WildFire Appliance (WF-500, WF-500-B)	13 May 202618:05	–	vulnrichment

Vulners

CNA

Node

paloaltonetworks wildfire_wf-500_and_wf-500-bRange12.1.0–12.1.7

Node

paloaltonetworks wildfire_wf-500_and_wf-500-bRange11.2.0–11.2.11

Node

paloaltonetworks wildfire_wf-500_and_wf-500-bRange11.1.0–11.1.13

Node

paloaltonetworks wildfire_wf-500_and_wf-500-bRange10.2.0–10.2.18

[
  {
    "vendor": "Palo Alto Networks",
    "product": "WildFire WF-500 and WF-500-B",
    "versions": [
      {
        "status": "affected",
        "version": "12.1.0",
        "lessThan": "12.1.7, 12.1.4-h5",
        "changes": [
          {
            "at": "12.1.7",
            "status": "unaffected"
          },
          {
            "at": "12.1.4-h5",
            "status": "unaffected"
          }
        ],
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "11.2.0",
        "lessThan": "11.2.11,11.2.7-h7",
        "changes": [
          {
            "at": "11.2.12",
            "status": "unaffected"
          },
          {
            "at": "11.2.10-h6",
            "status": "unaffected"
          },
          {
            "at": "11.2.7-h13",
            "status": "unaffected"
          },
          {
            "at": "11.2.4-h17",
            "status": "unaffected"
          }
        ],
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "11.1.0",
        "lessThan": "11.1.13,11.1.10-h8",
        "changes": [
          {
            "at": "11.1.15",
            "status": "unaffected"
          },
          {
            "at": "11.1.13-h5",
            "status": "unaffected"
          },
          {
            "at": "11.1.10-h25",
            "status": "unaffected"
          },
          {
            "at": "11.1.7-h6",
            "status": "unaffected"
          },
          {
            "at": "11.1.6-h32",
            "status": "unaffected"
          },
          {
            "at": "11.1.4-h33",
            "status": "unaffected"
          }
        ],
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "10.2.0",
        "lessThan": "10.2.18-h6, 10.2.16-h7, 10.2.13-h21, 10.2.10-h36, 10.2.7-h34",
        "changes": [
          {
            "at": "10.2.18-h6",
            "status": "unaffected"
          },
          {
            "at": "10.2.16-h7",
            "status": "unaffected"
          },
          {
            "at": "10.2.13-h21",
            "status": "unaffected"
          },
          {
            "at": "10.2.10-h36",
            "status": "unaffected"
          },
          {
            "at": "10.2.7-h34",
            "status": "unaffected"
          }
        ],
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
security	www.security.paloaltonetworks.com/CVE-2026-0259

17 Jun 2026 10:10Current

5.9Medium risk

Vulners AI Score5.9

CVSS 47.1

EPSS0.00278

SSVC

CWE-73