Threat intelligence / Vulnerability
CVE-2026-0300
Palo Alto Networks PAN-OS contains an out-of-bounds write vulnerability in the User-ID Authentication Portal (aka Captive Portal) service that can allow an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets.
Vulnerability
TypeVulnerability
External ID—
First seen2026-05-06
Last seen2026-05-06
Confidence
—
Palo Alto Networks PAN-OS contains an out-of-bounds write vulnerability in the User-ID Authentication Portal (aka Captive Portal) service that can allow an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets.
Labels
CISA KEV context
Vendor / productPalo Alto Networks PAN-OS
Added2026-05-06
Due date2026-05-09
1 recorded
Relationships
2 external