vulnti.work

Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability

High Listed in CISA KEV
CVECVE-2026-0300
First seen2026-05-06 00:00 UTC
Disclosed2026-05-06 00:00 UTC
Last updated2026-07-14 19:31 UTC
Channel statuspending_review

Summary

Palo Alto Networks PAN-OS contains an out-of-bounds write vulnerability in the User-ID Authentication Portal (aka Captive Portal) service that can allow an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets.

In-depth triage · Auto channel

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

  • Palo Alto Networks:PAN-OS

Sources

  • CISA KEV DATABASE

Original Links

Timeline

  1. kev_added CISA KEV
  2. kev_ingest CISA KEV