CVE-2026-0265

Katalog CVE

CVSS 8.1 · High EPSS 1,1%

Kerentanan Improper Verification of Cryptographic Signature pada paloaltonetworks pan-os. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to bypass authentication controls when Cloud Authentication Service (CAS) is enabled. The risk is higher if CAS is enabled on the management interface and lower when any other login interfaces are used. The risk of this issue is greatly reduced if you secure access to the management web interface by restricting access to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma Access® are not impacted by this vulnerability.

Rincian

Terbit di NVD

13 Mei 2026

Terakhir diubah

14 Juli 2026

Status NVD

Analyzed

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-347: Improper Verification of Cryptographic Signature

EPSS (30 hari)

1,1% peluang dieksploitasi; lebih tinggi dari 63,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 174 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://security.paloaltonetworks.com/CVE-2026-0265 advisory vendor
• https://cert-portal.siemens.com/productcert/html/ssa-967325.html advisory pihak ketiga