Known Exploited Vulnerabilities May 06, 2026 · CISA KEV Catalog

CVE-2026-0300: Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability

Palo Alto Networks PAN-OS contains an out-of-bounds write vulnerability in the User-ID Authentication Portal (aka Captive Portal) service that can allow an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-0300 Palo Alto Networks
Related: CVE-2026-0322: Palo Alto Networks PAN-OS Code Injection Vulnerability Known Exploited Vulnerabilities · Oct 14, 2026
CVE-2026-0257: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Known Exploited Vulnerabilities · May 29, 2026
CVE-2025-0111: Palo Alto Networks PAN-OS File Read Vulnerability Known Exploited Vulnerabilities · Feb 20, 2025