CVE-2026-0300

Published: May 6, 2026Modified: Jun 17, 2026CISA KEV

9.3

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:C/RE:M/U:Red

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:C/RE:M/U:RedShow less

Source: psirt@paloaltonetworks.com (Secondary)

Description

A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets. The risk of this issue is greatly reduced if you secure access to the User-ID™ Authentication Portal per the best practice guidelines https://knowledgebase.paloaltonetworks.com/KCSArticleDetail by restricting access to only trusted internal IP addresses. Prisma Access, Cloud NGFW and Panorama appliances are not impacted by this vulnerability.

Affected (163)

Products: Paloaltonetworks: Pan Os · Siemens: Ruggedcom Ape1808 Firmware

Paloaltonetworks

1 product

Pan Os

Siemens

1 product

Ruggedcom Ape1808 Firmware

Configuration A

162 vulnerable · 47 platform

Vulnerable Software	Affected Versions
Paloaltonetworks Pan Os	Version 10.2.0
Paloaltonetworks Pan Os	Version 10.2.10
Paloaltonetworks Pan Os	Version 10.2.10 h10
Paloaltonetworks Pan Os	Version 10.2.10 h12
Paloaltonetworks Pan Os	Version 10.2.10 h14
Paloaltonetworks Pan Os	Version 10.2.10 h17
Paloaltonetworks Pan Os	Version 10.2.10 h18
Paloaltonetworks Pan Os	Version 10.2.10 h21
Paloaltonetworks Pan Os	Version 10.2.10 h27
Paloaltonetworks Pan Os	Version 10.2.10 h2
Paloaltonetworks Pan Os	Version 10.2.10 h30
Paloaltonetworks Pan Os	Version 10.2.10 h31
Paloaltonetworks Pan Os	Version 10.2.10 h3
Paloaltonetworks Pan Os	Version 10.2.10 h4
Paloaltonetworks Pan Os	Version 10.2.10 h5
Paloaltonetworks Pan Os	Version 10.2.10 h7
Paloaltonetworks Pan Os	Version 10.2.10 h9
Paloaltonetworks Pan Os	Version 10.2.11
Paloaltonetworks Pan Os	Version 10.2.12
Paloaltonetworks Pan Os	Version 10.2.13
Paloaltonetworks Pan Os	Version 10.2.13 h10
Paloaltonetworks Pan Os	Version 10.2.13 h16
Paloaltonetworks Pan Os	Version 10.2.13 h18
Paloaltonetworks Pan Os	Version 10.2.13 h1
Paloaltonetworks Pan Os	Version 10.2.13 h2
Paloaltonetworks Pan Os	Version 10.2.13 h3
Paloaltonetworks Pan Os	Version 10.2.13 h4
Paloaltonetworks Pan Os	Version 10.2.13 h5
Paloaltonetworks Pan Os	Version 10.2.13 h7
Paloaltonetworks Pan Os	Version 10.2.14
Paloaltonetworks Pan Os	Version 10.2.15
Paloaltonetworks Pan Os	Version 10.2.16
Paloaltonetworks Pan Os	Version 10.2.16 h1
Paloaltonetworks Pan Os	Version 10.2.16 h4
Paloaltonetworks Pan Os	Version 10.2.16 h6
Paloaltonetworks Pan Os	Version 10.2.17
Paloaltonetworks Pan Os	Version 10.2.18
Paloaltonetworks Pan Os	Version 10.2.18 h1
Paloaltonetworks Pan Os	Version 10.2.18 h5
Paloaltonetworks Pan Os	Version 10.2.1
Paloaltonetworks Pan Os	Version 10.2.2
Paloaltonetworks Pan Os	Version 10.2.3
Paloaltonetworks Pan Os	Version 10.2.4
Paloaltonetworks Pan Os	Version 10.2.5
Paloaltonetworks Pan Os	Version 10.2.6
Paloaltonetworks Pan Os	Version 10.2.7
Paloaltonetworks Pan Os	Version 10.2.7 h12
Paloaltonetworks Pan Os	Version 10.2.7 h16
Paloaltonetworks Pan Os	Version 10.2.7 h19
Paloaltonetworks Pan Os	Version 10.2.7 h1
Paloaltonetworks Pan Os	Version 10.2.7 h21
Paloaltonetworks Pan Os	Version 10.2.7 h24
Paloaltonetworks Pan Os	Version 10.2.7 h32
Paloaltonetworks Pan Os	Version 10.2.7 h3
Paloaltonetworks Pan Os	Version 10.2.7 h6
Paloaltonetworks Pan Os	Version 10.2.7 h8
Paloaltonetworks Pan Os	Version 10.2.8
Paloaltonetworks Pan Os	Version 10.2.9
Paloaltonetworks Pan Os	Version 11.1.0
Paloaltonetworks Pan Os	Version 11.1.10
Paloaltonetworks Pan Os	Version 11.1.10 h10
Paloaltonetworks Pan Os	Version 11.1.10 h12
Paloaltonetworks Pan Os	Version 11.1.10 h1
Paloaltonetworks Pan Os	Version 11.1.10 h21
Paloaltonetworks Pan Os	Version 11.1.10 h4
Paloaltonetworks Pan Os	Version 11.1.10 h5
Paloaltonetworks Pan Os	Version 11.1.10 h7
Paloaltonetworks Pan Os	Version 11.1.10 h9
Paloaltonetworks Pan Os	Version 11.1.11
Paloaltonetworks Pan Os	Version 11.1.12
Paloaltonetworks Pan Os	Version 11.1.13
Paloaltonetworks Pan Os	Version 11.1.13 h1
Paloaltonetworks Pan Os	Version 11.1.13 h2
Paloaltonetworks Pan Os	Version 11.1.13 h3
Paloaltonetworks Pan Os	Version 11.1.14
Paloaltonetworks Pan Os	Version 11.1.1
Paloaltonetworks Pan Os	Version 11.1.2
Paloaltonetworks Pan Os	Version 11.1.3
Paloaltonetworks Pan Os	Version 11.1.4
Paloaltonetworks Pan Os	Version 11.1.4 h13
Paloaltonetworks Pan Os	Version 11.1.4 h15
Paloaltonetworks Pan Os	Version 11.1.4 h16
Paloaltonetworks Pan Os	Version 11.1.4 h17
Paloaltonetworks Pan Os	Version 11.1.4 h18
Paloaltonetworks Pan Os	Version 11.1.4 h1
Paloaltonetworks Pan Os	Version 11.1.4 h25
Paloaltonetworks Pan Os	Version 11.1.4 h27
Paloaltonetworks Pan Os	Version 11.1.4 h32
Paloaltonetworks Pan Os	Version 11.1.4 h4
Paloaltonetworks Pan Os	Version 11.1.4 h7
Paloaltonetworks Pan Os	Version 11.1.4 h9
Paloaltonetworks Pan Os	Version 11.1.5
Paloaltonetworks Pan Os	Version 11.1.6
Paloaltonetworks Pan Os	Version 11.1.6 h10
Paloaltonetworks Pan Os	Version 11.1.6 h14
Paloaltonetworks Pan Os	Version 11.1.6 h17
Paloaltonetworks Pan Os	Version 11.1.6 h19
Paloaltonetworks Pan Os	Version 11.1.6 h1
Paloaltonetworks Pan Os	Version 11.1.6 h20
Paloaltonetworks Pan Os	Version 11.1.6 h21
Paloaltonetworks Pan Os	Version 11.1.6 h22
Paloaltonetworks Pan Os	Version 11.1.6 h23
Paloaltonetworks Pan Os	Version 11.1.6 h25
Paloaltonetworks Pan Os	Version 11.1.6 h29
Paloaltonetworks Pan Os	Version 11.1.6 h2
Paloaltonetworks Pan Os	Version 11.1.6 h3
Paloaltonetworks Pan Os	Version 11.1.6 h4
Paloaltonetworks Pan Os	Version 11.1.6 h5
Paloaltonetworks Pan Os	Version 11.1.6 h6
Paloaltonetworks Pan Os	Version 11.1.6 h7
Paloaltonetworks Pan Os	Version 11.1.7
Paloaltonetworks Pan Os	Version 11.1.7 h1
Paloaltonetworks Pan Os	Version 11.1.7 h2
Paloaltonetworks Pan Os	Version 11.1.7 h4
Paloaltonetworks Pan Os	Version 11.1.8
Paloaltonetworks Pan Os	Version 11.1.9
Paloaltonetworks Pan Os	Version 11.2.0
Paloaltonetworks Pan Os	Version 11.2.10
Paloaltonetworks Pan Os	Version 11.2.10 h1
Paloaltonetworks Pan Os	Version 11.2.10 h2
Paloaltonetworks Pan Os	Version 11.2.10 h3
Paloaltonetworks Pan Os	Version 11.2.10 h4
Paloaltonetworks Pan Os	Version 11.2.10 h5
Paloaltonetworks Pan Os	Version 11.2.11
Paloaltonetworks Pan Os	Version 11.2.1
Paloaltonetworks Pan Os	Version 11.2.2
Paloaltonetworks Pan Os	Version 11.2.3
Paloaltonetworks Pan Os	Version 11.2.4
Paloaltonetworks Pan Os	Version 11.2.4 h10
Paloaltonetworks Pan Os	Version 11.2.4 h11
Paloaltonetworks Pan Os	Version 11.2.4 h12
Paloaltonetworks Pan Os	Version 11.2.4 h14
Paloaltonetworks Pan Os	Version 11.2.4 h15
Paloaltonetworks Pan Os	Version 11.2.4 h1
Paloaltonetworks Pan Os	Version 11.2.4 h2
Paloaltonetworks Pan Os	Version 11.2.4 h4
Paloaltonetworks Pan Os	Version 11.2.4 h5
Paloaltonetworks Pan Os	Version 11.2.4 h6
Paloaltonetworks Pan Os	Version 11.2.4 h7
Paloaltonetworks Pan Os	Version 11.2.4 h8
Paloaltonetworks Pan Os	Version 11.2.4 h9
Paloaltonetworks Pan Os	Version 11.2.5
Paloaltonetworks Pan Os	Version 11.2.6
Paloaltonetworks Pan Os	Version 11.2.7
Paloaltonetworks Pan Os	Version 11.2.7 h10
Paloaltonetworks Pan Os	Version 11.2.7 h11
Paloaltonetworks Pan Os	Version 11.2.7 h12
Paloaltonetworks Pan Os	Version 11.2.7 h1
Paloaltonetworks Pan Os	Version 11.2.7 h2
Paloaltonetworks Pan Os	Version 11.2.7 h3
Paloaltonetworks Pan Os	Version 11.2.7 h4
Paloaltonetworks Pan Os	Version 11.2.7 h7
Paloaltonetworks Pan Os	Version 11.2.7 h8
Paloaltonetworks Pan Os	Version 11.2.8
Paloaltonetworks Pan Os	Version 11.2.9
Paloaltonetworks Pan Os	Version 12.1.2
Paloaltonetworks Pan Os	Version 12.1.3
Paloaltonetworks Pan Os	Version 12.1.4
Paloaltonetworks Pan Os	Version 12.1.4 h2
Paloaltonetworks Pan Os	Version 12.1.4 h3
Paloaltonetworks Pan Os	Version 12.1.5
Paloaltonetworks Pan Os	Version 12.1.6

Running on/with	Platform Versions
Paloaltonetworks Pa 1410	All versions
Paloaltonetworks Pa 1420	All versions
Paloaltonetworks Pa 3410	All versions
Paloaltonetworks Pa 3420	All versions
Paloaltonetworks Pa 3430	All versions
Paloaltonetworks Pa 3440	All versions
Paloaltonetworks Pa 410	All versions
Paloaltonetworks Pa 410r	All versions
Paloaltonetworks Pa 410r 5g	All versions
Paloaltonetworks Pa 415	All versions
Paloaltonetworks Pa 415 5g	All versions
Paloaltonetworks Pa 440	All versions
Paloaltonetworks Pa 445	All versions
Paloaltonetworks Pa 450	All versions
Paloaltonetworks Pa 450r	All versions
Paloaltonetworks Pa 450r 5g	All versions
Paloaltonetworks Pa 455	All versions
Paloaltonetworks Pa 455 5g	All versions
Paloaltonetworks Pa 455r 5g	All versions
Paloaltonetworks Pa 460	All versions
Paloaltonetworks Pa 501	All versions
Paloaltonetworks Pa 505	All versions
Paloaltonetworks Pa 510	All versions
Paloaltonetworks Pa 520	All versions
Paloaltonetworks Pa 540	All versions
Paloaltonetworks Pa 5410	All versions
Paloaltonetworks Pa 5420	All versions
Paloaltonetworks Pa 5430	All versions
Paloaltonetworks Pa 5440	All versions
Paloaltonetworks Pa 5445	All versions
Paloaltonetworks Pa 545 Poe	All versions
Paloaltonetworks Pa 5450	All versions
Paloaltonetworks Pa 550	All versions
Paloaltonetworks Pa 5540	All versions
Paloaltonetworks Pa 555 Poe	All versions
Paloaltonetworks Pa 5550	All versions
Paloaltonetworks Pa 5560	All versions
Paloaltonetworks Pa 5570	All versions
Paloaltonetworks Pa 5580	All versions
Paloaltonetworks Pa 560	All versions
Paloaltonetworks Pa 7500	All versions
Paloaltonetworks Pa 7500 Dpc A	All versions
Paloaltonetworks Vm 100	All versions
Paloaltonetworks Vm 300	All versions
Paloaltonetworks Vm 50	All versions
Paloaltonetworks Vm 500	All versions
Paloaltonetworks Vm 700	All versions