CVE-2026-0300-PANOS

CVE-2026-0300-PANOS 🔓 Palo Alto Networks PAN-OS User-ID 门户中的未认证远程代码执行（RCE）漏洞 📋 漏洞详情 描述 本仓库包含针对 CVE-2026-0300 的安全研究与概念验证（PoC）演示，这是 Palo Alto Networks PAN-OS 中的一个严重漏洞，允许未认证攻击者在易受攻击的系统上执行任意代码。 ⚠️ 免责声明 ⚠️ 重要法律声明 本仓库仅 用于教育和授权安全研究目的。 🚫 请勿 将本代码用于您不拥有或未经明确许可测试的系统 📜 在大多数司法管辖区，未经授权访问计算机系统是非法的 🔒...

PAN-OS-User-ID-Buffer-Overflow-PoC

🛡️ CVE-2026-0300: Análisis de RCE en el Portal User-ID™ de PAN-OS Prueba de Concepto de Investigación: CWE-787 Escritura Fuera de Límites 📌 Resumen CVE-2026-0300 es una vulnerabilidad de desbordamiento de búfer de alta gravedad identificada en el Portal de Autenticación User-ID™ Portal Cautivo de...

cve-2026-0300-audit

Herramientas de Auditoría para CVE-2026-0300 Herramientas de auditoría de solo lectura para CVE-2026-0300 — el desbordamiento de búfer no autenticado en el Portal de Autenticación de User-ID de PAN-OS anteriormente conocido como "Portal Cautivo" en firewalls de las series PA y VM. Este repositori...

CVE-2026-0300-POC

🛡️ CVE-2026-0300：PAN-OS User-ID™ 门户远程代码执行分析 研究概念验证：CWE-787 越界写入 📌 概述 CVE-2026-0300 是在 Palo Alto Networks PAN-OS User-ID™ 身份验证门户（强制门户）中发现的一个高危缓冲区溢出漏洞。本研究仓库演示了该漏洞的技术逻辑，重点说明未认证的网络数据包如何导致以 root 权限执行远程代码执行（RCE） 。 📊 漏洞详情 特性| 详情 ---|--- CVE 编号| CVE-2026-0300 严重性评分| 9.3（严重） 弱点类型| CWE-787：越界写入 攻击向量| 网络（未认证...

CVE-2026-0300

🚨 CVE-2026-0300 - Palo Alto Networks PAN-OS 严重未认证远程代码执行漏洞 User-ID™ 认证门户 （强制门户）中的缓冲区溢出 — 已在野外被积极利用 📋 概述 PAN-OS 的 User-ID 认证门户中存在一个严重缓冲区溢出漏洞 （CWE-787），允许未认证攻击者 通过发送特制数据包实现以 root 权限远程执行代码 。 CVE 编号 ：CVE-2026-0300 CVSS 4.0 评分 ：9.3（严重） 紧急程度 ：最高 🛠️ 受影响产品 PA 系列防火墙 VM 系列防火墙 受影响的 PAN-OS 版本 不受影响 ：Cloud...

CVE-2026-0300

PAN-OS CVE-2026-0300 非破坏性暴露调查工具 概述 该工具是一个非破坏性暴露调查工具 ，用于评估目标 PAN-OS 服务是否可能暴露与 CVE-2026-0300 相关的网络可访问面。 该工具旨在用于授权的防御性安全验证、资产暴露审查和漏洞分类。它不会 利用该漏洞，不会 发送内存破坏载荷，也不会 尝试使目标设备崩溃或入侵。 目标 CVE 该工具设计用于与以下内容相关的暴露评估： CVE： CVE-2026-0300 厂商： Palo Alto Networks 产品： PAN-OS 受影响组件： User-ID 认证门户（也称为强制门户） 漏洞类型： 缓冲区溢出 /...

CVE-2026-0279

Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal aka Captive Portal service, GlobalProtect™ gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS® software enables a malicious unauthenticated user to store or execute malicious JavaScript payloa...

CVE-2026-0279 PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities

Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal aka Captive Portal service, GlobalProtect™ gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS® software enables a malicious unauthenticated user to store or execute malicious JavaScript payloa...

CVE-2026-0279 PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities

Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal aka Captive Portal service, GlobalProtect™ gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS® software enables a malicious unauthenticated user to store or execute malicious JavaScript payloa...

CVE-2026-0279

Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal aka Captive Portal service, GlobalProtect™ gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS® software enables a malicious unauthenticated user to store or execute malicious JavaScript payloa...

Palo Alto Networks PAN-OS 11.1.x < 11.1.16 / 11.2.x < 11.2.13 / 12.1.x < 12.1.8 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 11.1.x prior to 11.1.16, 11.2.x prior to 11.2.13, or 12.1.x prior to 12.1.8. It is, therefore, affected by a vulnerability. Multiple cross site scripting vulnerabilities in the User-ID Authentication Portal aka Captive Portal...

Exploit for Out-of-bounds Write in Paloaltonetworks Pan-Os

CVE-2026-0300 — Palo Alto Networks PAN-OS BOF RCE root...

CVE-2026-0300

A buffer overflow vulnerability in the User-ID™ Authentication Portal aka Captive Portal service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets. T...

Siemens RUGGEDCOM APE1808 Devices

SUMMARY A buffer overflow vulnerability in the User-ID™ Authentication Portal aka Captive Portal service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted...

Exploit for Out-of-bounds Write in Paloaltonetworks Pan-Os

CVE-2026-0300 Overview CVE-2026-0300 is a critical buffer...

PAN-OS RCE Exploit Under Active Use Enabling Root Access and Espionage

Palo Alto Networks has disclosed that threat actors may have attempted to unsuccessfully exploit a recently disclosed critical security flaw as early as April 9, 2026. The vulnerability in question is CVE-2026-0300 CVSS score: 9.3/8.7, a buffer overflow vulnerability in the User-ID Authentication...

Exploit for CVE-2026-0300

PAN-OS CVE-2026-0300 Non-Destructive Exposure Survey Tool...

CVE-2026-0300

A buffer overflow vulnerability in the User-ID™ Authentication Portal aka Captive Portal service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets. T...

CVE-2026-0300

A buffer overflow vulnerability in the User-ID™ Authentication Portal aka Captive Portal service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets. T...

CVE-2026-0300 PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal

A buffer overflow vulnerability in the User-ID™ Authentication Portal aka Captive Portal service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets. T...