Remote code execution affecting PAN-OS

PAN-OS is Palo Alto Networks' proprietary operating system designed to manage next-generation firewalls and secure network infrastructure. This system, running on PA and VM series firewalls, is affected by a vulnerability labeled CVE-2026-0300 resulting from an out-of-bounds write buffer overflow within the User-ID™ authentication portal (Captive Portal). Exploitation of this vulnerability would allow an unauthenticated attacker to execute arbitrary code with administrator (root) privileges by sending specifically crafted network packets to the vulnerable portal. It is classified critical with a severity score of 9.3 according to CVSS V3.1.

• PAN-OS 12.1 versions prior to 12.1.4-h5 and 12.1.7;
• PAN-OS 11.2 versions prior to 11.2.4-h17, 11.2.7-h13, 11.2.10-h6 and 11.2.12;
• PAN-OS 11.1 versions prior to 11.1.4-h33, 11.1.6-h32, 11.1.7-h6, 11.1.10-h25, 11.1.13-h5 and 11.1.15;
• PAN-OS 10.2 versions prior to 10.2.7-h34, 10.2.10-h36, 10.2.13-h21, 10.2.16-h7, and 10.2.18-h6;