CVE-2026-0300

Warnung

Medienbericht

EPSS 32.07%
Veröffentlicht 06.05.2026 18:57:39
Zuletzt bearbeitet 12.05.2026 18:47:21
Erkennungen
Login

PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal

A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets. 

The risk of this issue is greatly reduced if you secure access to the User-ID™ Authentication Portal per the  best practice guidelines https://knowledgebase.paloaltonetworks.com/KCSArticleDetail  by restricting access to only trusted internal IP addresses.

Prisma Access, Cloud NGFW and Panorama appliances are not impacted by this vulnerability.

Betroffene Produkte Warnungen 2 Metriken 3 CWE 1 Referenzen 12

NVD 163 VulnDex Vulnerability Enrichment 2

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Paloaltonetworks ≫ Pan-os Version 10.2.0

Paloaltonetworks ≫ Pan-os Version 10.2.1

Paloaltonetworks ≫ Pan-os Version 10.2.2

Paloaltonetworks ≫ Pan-os Version 10.2.3

Paloaltonetworks ≫ Pan-os Version 10.2.4

Paloaltonetworks ≫ Pan-os Version 10.2.5

Paloaltonetworks ≫ Pan-os Version 10.2.6

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update -

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h1

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h12

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h16

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h19

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h21

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h24

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h3

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h32

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h6

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h8

Paloaltonetworks ≫ Pan-os Version 10.2.8

Paloaltonetworks ≫ Pan-os Version 10.2.9

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update -

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h10

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h12

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h14

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h17

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h18

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h2

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h21

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h27

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h3

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h30

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h31

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h4

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h5

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h7

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h9

Paloaltonetworks ≫ Pan-os Version 10.2.11

Paloaltonetworks ≫ Pan-os Version 10.2.12

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update -

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h1

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h10

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h16

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h18

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h2

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h3

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h4

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h5

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h7

Paloaltonetworks ≫ Pan-os Version 10.2.14

Paloaltonetworks ≫ Pan-os Version 10.2.15

Paloaltonetworks ≫ Pan-os Version 10.2.16 Update -

Paloaltonetworks ≫ Pan-os Version 10.2.16 Update h1

Paloaltonetworks ≫ Pan-os Version 10.2.16 Update h4

Paloaltonetworks ≫ Pan-os Version 10.2.16 Update h6

Paloaltonetworks ≫ Pan-os Version 10.2.17 Update -

Paloaltonetworks ≫ Pan-os Version 10.2.18 Update -

Paloaltonetworks ≫ Pan-os Version 10.2.18 Update h1

Paloaltonetworks ≫ Pan-os Version 10.2.18 Update h5

Paloaltonetworks ≫ Pan-os Version 11.1.0

Paloaltonetworks ≫ Pan-os Version 11.1.1

Paloaltonetworks ≫ Pan-os Version 11.1.2

Paloaltonetworks ≫ Pan-os Version 11.1.3

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update -

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h1

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h13

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h15

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h16

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h17

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h18

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h25

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h27

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h32

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h4

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h7

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h9

Paloaltonetworks ≫ Pan-os Version 11.1.5

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update -

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h1

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h10

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h14

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h17

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h19

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h2

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h20

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h21

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h22

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h23

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h25

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h29

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h3

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h4

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h5

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h6

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h7

Paloaltonetworks ≫ Pan-os Version 11.1.7 Update -

Paloaltonetworks ≫ Pan-os Version 11.1.7 Update h1

Paloaltonetworks ≫ Pan-os Version 11.1.7 Update h2

Paloaltonetworks ≫ Pan-os Version 11.1.7 Update h4

Paloaltonetworks ≫ Pan-os Version 11.1.8

Paloaltonetworks ≫ Pan-os Version 11.1.9

Paloaltonetworks ≫ Pan-os Version 11.1.10 Update -

Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h1

Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h10

Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h12

Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h21

Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h4

Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h5

Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h7

Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h9

Paloaltonetworks ≫ Pan-os Version 11.1.11

Paloaltonetworks ≫ Pan-os Version 11.1.12

Paloaltonetworks ≫ Pan-os Version 11.1.13 Update -

Paloaltonetworks ≫ Pan-os Version 11.1.13 Update h1

Paloaltonetworks ≫ Pan-os Version 11.1.13 Update h2

Paloaltonetworks ≫ Pan-os Version 11.1.13 Update h3

Paloaltonetworks ≫ Pan-os Version 11.1.14 Update -

Paloaltonetworks ≫ Pan-os Version 11.2.0

Paloaltonetworks ≫ Pan-os Version 11.2.1

Paloaltonetworks ≫ Pan-os Version 11.2.2

Paloaltonetworks ≫ Pan-os Version 11.2.3

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update -

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h1

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h10

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h11

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h12

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h14

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h15

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h2

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h4

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h5

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h6

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h7

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h8

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h9

Paloaltonetworks ≫ Pan-os Version 11.2.5

Paloaltonetworks ≫ Pan-os Version 11.2.6

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update -

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h1

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h10

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h11

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h12

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h2

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h3

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h4

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h7

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h8

Paloaltonetworks ≫ Pan-os Version 11.2.8

Paloaltonetworks ≫ Pan-os Version 11.2.9

Paloaltonetworks ≫ Pan-os Version 11.2.10 Update -

Paloaltonetworks ≫ Pan-os Version 11.2.10 Update h1

Paloaltonetworks ≫ Pan-os Version 11.2.10 Update h2

Paloaltonetworks ≫ Pan-os Version 11.2.10 Update h3

Paloaltonetworks ≫ Pan-os Version 11.2.10 Update h4

Paloaltonetworks ≫ Pan-os Version 11.2.10 Update h5

Paloaltonetworks ≫ Pan-os Version 11.2.11 Update -

Paloaltonetworks ≫ Pan-os Version 12.1.2

Paloaltonetworks ≫ Pan-os Version 12.1.3

Paloaltonetworks ≫ Pan-os Version 12.1.4 Update -

Paloaltonetworks ≫ Pan-os Version 12.1.4 Update h2

Paloaltonetworks ≫ Pan-os Version 12.1.4 Update h3

Paloaltonetworks ≫ Pan-os Version 12.1.5 Update -

Paloaltonetworks ≫ Pan-os Version 12.1.6 Update -

Siemens ≫ Ruggedcom Ape1808 Firmware Version -

Siemens ≫ Ruggedcom Ape1808 Version -

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

06.05.2026: CISA Known Exploited Vulnerabilities (KEV) Catalog

Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability

Schwachstelle

Palo Alto Networks PAN-OS contains an out-of-bounds write vulnerability in the User-ID Authentication Portal (aka Captive Portal) service that can allow an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets.

Beschreibung

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Until the vendor releases an official fix, the following workaround should be implemented: - Restrict User-ID Authentication Portal access to only trusted zones. - Disable User-ID Authentication Portal if not required.

Erforderliche Maßnahmen

06.05.2026:

https://cert.europa.eu/publications/security-advisories/2026-006/

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	32.07%	0.981

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
psirt@paloaltonetworks.com	9.3	0	0	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:C/RE:M/U:Red