Advisory 2026-1345 - Palo Alto Networks PAN-OS: Vulnerability allows execution of arbitrary code with administrative rights

Notice: You can now also find information from the Vulnerability Advisory Service in the CTI portal!
The CTI portal is available at the following address: https://cti-portal.telekom.net/advisories/2026-1345

Notice: This advisory is by exception shown completely public. You will regularly receive details on vulnerability information as a customer via your login or through our daily advisory e-mail.

5	Attack probability high
5	Potential damage high

Date: 2026-05-06
Release: 2026-05-06

Operating System

Sonstiges

Software

Palo Alto Networks PAN-OS
Palo Alto Networks PAN-OS < 10.2.10-h36
Palo Alto Networks PAN-OS < 10.2.13-h21
Palo Alto Networks PAN-OS < 10.2.16-h7
Palo Alto Networks PAN-OS < 10.2.18-h6
Palo Alto Networks PAN-OS < 10.2.7-h34
Palo Alto Networks PAN-OS < 11.1.10-h25
Palo Alto Networks PAN-OS < 11.1.13-h5
Palo Alto Networks PAN-OS < 11.1.15
Palo Alto Networks PAN-OS < 11.1.4-h33
Palo Alto Networks PAN-OS < 11.1.6-h32
Palo Alto Networks PAN-OS < 11.1.7-h6
Palo Alto Networks PAN-OS < 11.2.10-h6
Palo Alto Networks PAN-OS < 11.2.12
Palo Alto Networks PAN-OS < 11.2.4-h17
Palo Alto Networks PAN-OS < 11.2.7-h13
Palo Alto Networks PAN-OS < 12.1.4-h5
Palo Alto Networks PAN-OS < 12.1.7

Attack

A remote anonymous attacker can exploit a vulnerability in Palo Alto Networks PAN-OS in order to execute arbitrary code with administrative rights.

Description

PAN-OS is the operating system of the securitysystems / firewalls by Palo Alto Networks.

CVE-2026-0300

There is a vulnerability in Palo Alto Networks PAN-OS. The vulnerability is caused by a buffer overflow. This flaw can be triggered by sending specially crafted packets. The risk is reduced if access to the User-ID Authentication Portal is restricted to only internal IPs. A remote anonymous attacker can exploit this vulnerability in order to execute arbitrary code with administrative rights.

CVSSv2 Base Score: 10.0 / Temporal Score: 8.7
AV:N/AC:L/AU:N/C:C/I:C/A:C/E:H/RL:OF/RC:ND
CVSSv3.1 Base Score: 10.0 / Temporal Score: 9.5
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:H/RL:O/RC:X

The vulnerability CVE-2026-0300 is already being actively exploited.

Recommendation

Palo Alto Networks describes a workaround. For further information please consult the vendor's advisory.
https://security.paloaltonetworks.com/CVE-2026-0300

Palo Alto Networks has not yet released these updates, but is planning to do so in the short term. Please see the vendor's advisory to find the proper version suitable for your environment.
https://security.paloaltonetworks.com/CVE-2026-0300

Information

Palo Alto Networks Security Advisory dated 2026-05-05
https://security.paloaltonetworks.com/CVE-2026-0300

References

CVE:CVE-2026-0300
EUVD:EUVD-2026-27879

Disclaimer

*The probability of an attack is determined by the attacker's motivation, the necessary expend and the possibilities for an attack. The damage probability is determined by the expend needed to resolute the attack and probable indirect consequences of an attack for business processes. Telekom Security assumes worst case scenarios.

Copyright © 1999-2026 Deutsche Telekom Security GmbH. All rights reserved. Reproduction and distribution of this publication in any form - even in parts - without prior written permission is forbidden.

The information contained herein has been obtained from sources believed to be reliable and trusted or have been verified. Telekom Security can take liability for completeness, accuracy and correctness only in so far, as gross negligence or intention create liability. Any liability beyond it, in particular possible damages resulting from using or non-usability of the information contained herein, is excluded.