CVE-2026-0300

CVSS

—

EPSS

0.317 (98.2th percentile)

CISA KEV

Added 2026-05-06, due 2026-05-09

Exploitation

No report

Public exploits

10 repositories

State

Unknown

Coverage

• 

  ● Actively exploitedCritical 100Wiz Research06 May, 12:33

  Critical Buffer Overflow Vulnerability in PAN-OS Exploited in-the-Wild

  Detect and mitigate CVE-2026-0300, a critical vulnerability in Palo Alto Networks PAN-OS User-ID Authentication Portal that allows unauthenticated attackers to achieve remote code execution (RCE) with root privileges.

  ↗wiz.io/blog/critical-vulnerability-in-pan-os-ex…(opens the publisher's site in a new tab)

What we observed

1. 24 Sept, 12:31poc publishedpoc-in-github
2. 24 Sept, 12:16poc publishedpoc-in-github
3. 24 Sept, 11:53poc publishedpoc-in-github
4. 24 Sept, 11:50kev addedcisa-kev