← CVE Intelligence

CVE-2026-0300

PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal PUBLISHED

Description (CNA)

A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets. The risk of this issue is greatly reduced if you secure access to the User-ID™ Authentication Portal per the best practice guidelines https://knowledgebase.paloaltonetworks.com/KCSArticleDetail by restricting access to only trusted internal IP addresses. Prisma Access, Cloud NGFW and Panorama appliances are not impacted by this vulnerability.

Affected (CNA)

Vendor / productVersions
Palo Alto Networks / Cloud NGFWunaffected All
Palo Alto Networks / PAN-OSaffected 12.1.0 before 12.1.7; affected 11.2.0 before 11.2.12; affected 11.1.0 before 11.1.15; affected 10.2.0 before 10.2.18-h6
Palo Alto Networks / Prisma Accessunaffected All

CWE

CWE-787

References

ADP enrichment

CISA-ADP

No English description supplied.

siemens-SADP

No English description supplied.