PT-2026-40713

Name of the Vulnerable Software and Affected Versions PAN-OS affected versions not specified Description An authentication bypass exists in the Cloud Authentication Service CAS component of PAN-OS due to incorrect cryptographic signature verification. This allows an unauthenticated attacker with...

CVE-2026-0300

CVE-2026-0300 is a buffer-overflow vulnerability in the PAN-OS User-ID Authentication Portal (Captive Portal) that allows unauthenticated remote code execution with root privileges on affected PA-Series and VM-Series firewalls. Exploitation has been observed in the wild when the portal is exposed...