CVE-2026-0300

Опубликовано: 06 мая 2026

Источник: nvd

CVSS3: 9.8

EPSS Средний

Описание

The risk of this issue is greatly reduced if you secure access to the User-ID™ Authentication Portal per the best practice guidelines https://knowledgebase.paloaltonetworks.com/KCSArticleDetail by restricting access to only trusted internal IP addresses.

Prisma Access, Cloud NGFW and Panorama appliances are not impacted by this vulnerability.

Ссылки

https://security.paloaltonetworks.com/CVE-2026-0300
Mitigation
Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-967325.html
Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-0300
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:*:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.1:*:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:*:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:*:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:*:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:*:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.6:*:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h12:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h16:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h19:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h21:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h24:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h3:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h32:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h6:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h8:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:*:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:*:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h10:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h12:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h14:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h17:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h18:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h2:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h21:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h27:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h3:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h30:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h31:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h4:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h5:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h7:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h9:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.11:*:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.12:*:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h10:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h16:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h18:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h2:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h3:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h4:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h5:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h7:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.14:*:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.15:*:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h4:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h6:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.17:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h5:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:*:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.1:*:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:*:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.3:*:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h13:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h15:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h16:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h17:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h18:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h25:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h27:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h32:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h4:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h7:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h9:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.5:*:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h10:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h14:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h17:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h19:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h2:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h20:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h21:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h22:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h23:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h25:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h29:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h3:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h4:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h5:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h6:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h7:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h2:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h4:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.8:*:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.9:*:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h10:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h12:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h21:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h4:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h5:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h7:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h9:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.11:*:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.12:*:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h2:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h3:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.14:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.0:*:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.1:*:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.2:*:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.3:*:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h10:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h11:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h12:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h14:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h15:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h2:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h4:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h5:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h6:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h7:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h8:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h9:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.5:*:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.6:*:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h10:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h11:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h12:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h2:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h3:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h4:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h7:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h8:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.8:*:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.9:*:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h2:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h3:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h4:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h5:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.11:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:12.1.2:*:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:12.1.3:*:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h2:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h3:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:12.1.5:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:12.1.6:-:*:*:*:*:*:*

Одно из

cpe:2.3:h:paloaltonetworks:pa-1410:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-1420:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-3410:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-3420:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-3430:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-3440:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-410:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-410r:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-410r-5g:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-415:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-415-5g:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-440:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-445:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-450:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-450r:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-450r-5g:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-455:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-455-5g:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-455r-5g:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-460:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-501:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-505:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-510:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-520:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-540:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-5410:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-5420:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-5430:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-5440:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-5445:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-545-poe:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-5450:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-550:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-5540:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-555-poe:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-5550:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-5560:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-5570:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-5580:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-560:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-7500:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:pa-7500-dpc-a:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:vm-100:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:vm-300:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:vm-50:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:vm-500:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:vm-700:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:siemens:ruggedcom_ape1808_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:siemens:ruggedcom_ape1808:-:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.32074

Средний

9.8 Critical

CVSS3

Дефекты

CWE-787

Связанные уязвимости

GHSA-3vfh-3cpw-2378

CVSS3: 9.8

github

3 месяца назад

A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets. The risk of this issue is greatly reduced if you secure access to the User-ID™ Authentication Portal per the best practice guidelines https://knowledgebase.paloaltonetworks.com/KCSArticleDetail by restricting access to only trusted internal IP addresses. Prisma Access, Cloud NGFW and Panorama appliances are not impacted by this vulnerability.

BDU:2026-06322

CVSS3: 7.3

fstec