← CVE Intelligence

CVE-2026-0283

PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN) PUBLISHED

Description (CNA)

An authentication bypass vulnerability in Large Scale VPN ( LSVPN) functionality of Palo Alto Networks PAN-OS software allows an attacker with network access to bypass security restrictions and establish an unauthorized site-to-site VPN connection. Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.

Affected (CNA)

Vendor / productVersions
Palo Alto Networks / Cloud NGFWunaffected All
Palo Alto Networks / PAN-OSaffected 12.1.0 before 12.1.8; affected 11.2.0 before 11.2.13; affected 11.1.0 before 11.1.16; affected 10.2.0 before 10.2.18-h8
Palo Alto Networks / Prisma Accessunaffected All

CWE

CWE-306

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

siemens-SADP

No English description supplied.