CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-0300

A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets. The risk of this issue is greatly reduced if you secure access to the User-ID™ Authentication Portal per the best practice guidelines https://knowledgebase.paloaltonetworks.com/KCSArticleDetail by restricting access to only trusted internal IP addresses. Prisma Access, Cloud NGFW and Panorama appliances are not impacted by this vulnerability.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.045

EPSS Ranking 89.4%

CVSS Severity

CVSS v3 Score 9.8

Proposed Action

Palo Alto Networks PAN-OS contains an out-of-bounds write vulnerability in the User-ID Authentication Portal (aka Captive Portal) service that can allow an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets.

Ransomware Campaign

Unknown

References

Products affected by CVE-2026-0300

Paloaltonetworks » Pa-1410 » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-1410:-
Paloaltonetworks » Pa-1420 » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-1420:-
Paloaltonetworks » Pa-3410 » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-3410:-
Paloaltonetworks » Pa-3420 » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-3420:-
Paloaltonetworks » Pa-3430 » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-3430:-
Paloaltonetworks » Pa-3440 » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-3440:-
Paloaltonetworks » Pa-410 » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-410:-
Paloaltonetworks » Pa-410r-5g » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-410r-5g:-
Paloaltonetworks » Pa-410r » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-410r:-
Paloaltonetworks » Pa-415-5g » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-415-5g:-
Paloaltonetworks » Pa-415 » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-415:-
Paloaltonetworks » Pa-440 » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-440:-
Paloaltonetworks » Pa-445 » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-445:-
Paloaltonetworks » Pa-450 » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-450:-
Paloaltonetworks » Pa-450r-5g » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-450r-5g:-
Paloaltonetworks » Pa-450r » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-450r:-
Paloaltonetworks » Pa-455-5g » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-455-5g:-
Paloaltonetworks » Pa-455 » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-455:-
Paloaltonetworks » Pa-455r-5g » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-455r-5g:-
Paloaltonetworks » Pa-460 » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-460:-
Paloaltonetworks » Pa-501 » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-501:-
Paloaltonetworks » Pa-505 » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-505:-
Paloaltonetworks » Pa-510 » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-510:-
Paloaltonetworks » Pa-520 » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-520:-
Paloaltonetworks » Pa-540 » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-540:-
Paloaltonetworks » Pa-5410 » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-5410:-
Paloaltonetworks » Pa-5420 » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-5420:-
Paloaltonetworks » Pa-5430 » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-5430:-
Paloaltonetworks » Pa-5440 » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-5440:-
Paloaltonetworks » Pa-5445 » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-5445:-
Paloaltonetworks » Pa-545-Poe » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-545-poe:-
Paloaltonetworks » Pa-5450 » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-5450:-
Paloaltonetworks » Pa-550 » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-550:-
Paloaltonetworks » Pa-5540 » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-5540:-
Paloaltonetworks » Pa-555-Poe » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-555-poe:-
Paloaltonetworks » Pa-5550 » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-5550:-
Paloaltonetworks » Pa-5560 » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-5560:-
Paloaltonetworks » Pa-5570 » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-5570:-
Paloaltonetworks » Pa-5580 » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-5580:-
Paloaltonetworks » Pa-560 » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-560:-
Paloaltonetworks » Pa-7500-Dpc-A » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-7500-dpc-a:-
Paloaltonetworks » Pa-7500 » Version: N/A

cpe:2.3:h:paloaltonetworks:pa-7500:-
Paloaltonetworks » Vm-100 » Version: N/A

cpe:2.3:h:paloaltonetworks:vm-100:-
Paloaltonetworks » Vm-300 » Version: N/A

cpe:2.3:h:paloaltonetworks:vm-300:-
Paloaltonetworks » Vm-500 » Version: N/A

cpe:2.3:h:paloaltonetworks:vm-500:-
Paloaltonetworks » Vm-50 » Version: N/A

cpe:2.3:h:paloaltonetworks:vm-50:-
Paloaltonetworks » Vm-700 » Version: N/A

cpe:2.3:h:paloaltonetworks:vm-700:-
Siemens » Ruggedcom Ape1808 » Version: N/A

cpe:2.3:h:siemens:ruggedcom_ape1808:-
Paloaltonetworks » Pan-Os » Version: 10.2.0

cpe:2.3:o:paloaltonetworks:pan-os:10.2.0
Paloaltonetworks » Pan-Os » Version: 10.2.1

cpe:2.3:o:paloaltonetworks:pan-os:10.2.1
Paloaltonetworks » Pan-Os » Version: 10.2.10

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10
Paloaltonetworks » Pan-Os » Version: 10.2.11

cpe:2.3:o:paloaltonetworks:pan-os:10.2.11
Paloaltonetworks » Pan-Os » Version: 10.2.12

cpe:2.3:o:paloaltonetworks:pan-os:10.2.12
Paloaltonetworks » Pan-Os » Version: 10.2.13

cpe:2.3:o:paloaltonetworks:pan-os:10.2.13
Paloaltonetworks » Pan-Os » Version: 10.2.14

cpe:2.3:o:paloaltonetworks:pan-os:10.2.14
Paloaltonetworks » Pan-Os » Version: 10.2.15

cpe:2.3:o:paloaltonetworks:pan-os:10.2.15
Paloaltonetworks » Pan-Os » Version: 10.2.16

cpe:2.3:o:paloaltonetworks:pan-os:10.2.16
Paloaltonetworks » Pan-Os » Version: 10.2.17

cpe:2.3:o:paloaltonetworks:pan-os:10.2.17
Paloaltonetworks » Pan-Os » Version: 10.2.18

cpe:2.3:o:paloaltonetworks:pan-os:10.2.18
Paloaltonetworks » Pan-Os » Version: 10.2.2

cpe:2.3:o:paloaltonetworks:pan-os:10.2.2
Paloaltonetworks » Pan-Os » Version: 10.2.3

cpe:2.3:o:paloaltonetworks:pan-os:10.2.3
Paloaltonetworks » Pan-Os » Version: 10.2.4

cpe:2.3:o:paloaltonetworks:pan-os:10.2.4
Paloaltonetworks » Pan-Os » Version: 10.2.5

cpe:2.3:o:paloaltonetworks:pan-os:10.2.5
Paloaltonetworks » Pan-Os » Version: 10.2.6

cpe:2.3:o:paloaltonetworks:pan-os:10.2.6
Paloaltonetworks » Pan-Os » Version: 10.2.7

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7
Paloaltonetworks » Pan-Os » Version: 10.2.8

cpe:2.3:o:paloaltonetworks:pan-os:10.2.8
Paloaltonetworks » Pan-Os » Version: 10.2.9

cpe:2.3:o:paloaltonetworks:pan-os:10.2.9
Paloaltonetworks » Pan-Os » Version: 11.1.0

cpe:2.3:o:paloaltonetworks:pan-os:11.1.0
Paloaltonetworks » Pan-Os » Version: 11.1.1

cpe:2.3:o:paloaltonetworks:pan-os:11.1.1
Paloaltonetworks » Pan-Os » Version: 11.1.10

cpe:2.3:o:paloaltonetworks:pan-os:11.1.10
Paloaltonetworks » Pan-Os » Version: 11.1.11

cpe:2.3:o:paloaltonetworks:pan-os:11.1.11
Paloaltonetworks » Pan-Os » Version: 11.1.12

cpe:2.3:o:paloaltonetworks:pan-os:11.1.12
Paloaltonetworks » Pan-Os » Version: 11.1.13

cpe:2.3:o:paloaltonetworks:pan-os:11.1.13
Paloaltonetworks » Pan-Os » Version: 11.1.14

cpe:2.3:o:paloaltonetworks:pan-os:11.1.14
Paloaltonetworks » Pan-Os » Version: 11.1.2

cpe:2.3:o:paloaltonetworks:pan-os:11.1.2
Paloaltonetworks » Pan-Os » Version: 11.1.3

cpe:2.3:o:paloaltonetworks:pan-os:11.1.3
Paloaltonetworks » Pan-Os » Version: 11.1.4

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4
Paloaltonetworks » Pan-Os » Version: 11.1.5

cpe:2.3:o:paloaltonetworks:pan-os:11.1.5
Paloaltonetworks » Pan-Os » Version: 11.1.6

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6
Paloaltonetworks » Pan-Os » Version: 11.1.7

cpe:2.3:o:paloaltonetworks:pan-os:11.1.7
Paloaltonetworks » Pan-Os » Version: 11.1.8

cpe:2.3:o:paloaltonetworks:pan-os:11.1.8
Paloaltonetworks » Pan-Os » Version: 11.1.9

cpe:2.3:o:paloaltonetworks:pan-os:11.1.9
Paloaltonetworks » Pan-Os » Version: 11.2.0

cpe:2.3:o:paloaltonetworks:pan-os:11.2.0
Paloaltonetworks » Pan-Os » Version: 11.2.1

cpe:2.3:o:paloaltonetworks:pan-os:11.2.1
Paloaltonetworks » Pan-Os » Version: 11.2.10

cpe:2.3:o:paloaltonetworks:pan-os:11.2.10
Paloaltonetworks » Pan-Os » Version: 11.2.11

cpe:2.3:o:paloaltonetworks:pan-os:11.2.11
Paloaltonetworks » Pan-Os » Version: 11.2.2

cpe:2.3:o:paloaltonetworks:pan-os:11.2.2
Paloaltonetworks » Pan-Os » Version: 11.2.3

cpe:2.3:o:paloaltonetworks:pan-os:11.2.3
Paloaltonetworks » Pan-Os » Version: 11.2.4

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4
Paloaltonetworks » Pan-Os » Version: 11.2.5

cpe:2.3:o:paloaltonetworks:pan-os:11.2.5
Paloaltonetworks » Pan-Os » Version: 11.2.6

cpe:2.3:o:paloaltonetworks:pan-os:11.2.6
Paloaltonetworks » Pan-Os » Version: 11.2.7

cpe:2.3:o:paloaltonetworks:pan-os:11.2.7
Paloaltonetworks » Pan-Os » Version: 11.2.8

cpe:2.3:o:paloaltonetworks:pan-os:11.2.8
Paloaltonetworks » Pan-Os » Version: 11.2.9

cpe:2.3:o:paloaltonetworks:pan-os:11.2.9
Paloaltonetworks » Pan-Os » Version: 12.1.2

cpe:2.3:o:paloaltonetworks:pan-os:12.1.2
Paloaltonetworks » Pan-Os » Version: 12.1.3

cpe:2.3:o:paloaltonetworks:pan-os:12.1.3
Paloaltonetworks » Pan-Os » Version: 12.1.4

cpe:2.3:o:paloaltonetworks:pan-os:12.1.4
Paloaltonetworks » Pan-Os » Version: 12.1.5

cpe:2.3:o:paloaltonetworks:pan-os:12.1.5
Paloaltonetworks » Pan-Os » Version: 12.1.6

cpe:2.3:o:paloaltonetworks:pan-os:12.1.6
Siemens » Ruggedcom Ape1808 Firmware » Version: N/A

cpe:2.3:o:siemens:ruggedcom_ape1808_firmware:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-0300

Products

Pricing

Contact Us