Critical Buffer Overflow in Palo Alto Networks PAN-OS User-ID Authentication Portal (CVE-2026-0300)

Summary of CVE-2026-0300

Vulnerability Details:

• Product: Palo Alto Networks PAN-OS
• CVSS Score: 9.8 (Critical)
• Impact: Remote attackers can execute arbitrary code on the device.
• Exploitation Vector: Authentication Portal feature in PAN-OS versions prior to 10.2.18-h6, 10.2.13-h21, 10.2.10-h36, 10.2.7-h34, 10.2.5-h9, and earlier.

Mitigation Steps:

• Restrict Access: Limit User-ID™ Authentication Portal access to trusted internal zones.
• Disable Feature: Disable the Authentication Portal if it is not required.

Affected Versions

Read the full article at Rapid7 Blog

---

Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.