CVE-2026-0300 Palo Alto Networks Cloud NGFW
A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series…
- CVSS
- 9.3 Critical
- EPSS
- 42%
- Percentile
- 99
- Published
- 2026-05-06
- Force
- 10 of 12
- Public PoC
- 10
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:A/AU:Y/R:U/V:C/RE:M/U:Red
On CISA’s exploited list
Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability
- Added
- 2026-05-06
- Federal patch deadline
- 2026-05-09
- Ransomware use
- not known