CVE-2026-0283

paloaltonetworks pan-os

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2026-0283

Katalog CVE

CVSS 7.2 · High EPSS 0,38%

Kerentanan Missing Authentication for Critical Function pada paloaltonetworks pan-os. Skor CVSS 3.1 7.2 (High) menurut NVD.

Deskripsi (NVD)

An authentication bypass vulnerability in Large Scale VPN ( LSVPN) functionality of Palo Alto Networks PAN-OS software allows an attacker with network access to bypass security restrictions and establish an unauthorized site-to-site VPN connection. Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.

Rincian

Terbit di NVD
9 Juli 2026
Terakhir diubah
11 Agustus 2026
Status NVD
Modified
CVSS 3.1
7.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-306: Missing Authentication for Critical Function
EPSS (30 hari)
0,38% peluang dieksploitasi; lebih tinggi dari 29,7% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
paloaltonetworks pan-os Versi 10.2.0 hingga sebelum 10.2.7
paloaltonetworks pan-os Versi 10.2.8 hingga sebelum 10.2.10
paloaltonetworks pan-os Versi 10.2.11 hingga sebelum 10.2.13
paloaltonetworks pan-os Versi 10.2.14 hingga sebelum 10.2.16
paloaltonetworks pan-os Versi 10.2.7
paloaltonetworks pan-os Versi 10.2.7 h1
paloaltonetworks pan-os Versi 10.2.7 h10
paloaltonetworks pan-os Versi 10.2.7 h11
paloaltonetworks pan-os Versi 10.2.7 h12
paloaltonetworks pan-os Versi 10.2.7 h13
paloaltonetworks pan-os Versi 10.2.7 h14
paloaltonetworks pan-os Versi 10.2.7 h15
paloaltonetworks pan-os Versi 10.2.7 h16
paloaltonetworks pan-os Versi 10.2.7 h17
paloaltonetworks pan-os Versi 10.2.7 h18
paloaltonetworks pan-os Versi 10.2.7 h19
paloaltonetworks pan-os Versi 10.2.7 h2
paloaltonetworks pan-os Versi 10.2.7 h20
paloaltonetworks pan-os Versi 10.2.7 h21
paloaltonetworks pan-os Versi 10.2.7 h22
paloaltonetworks pan-os Versi 10.2.7 h23
paloaltonetworks pan-os Versi 10.2.7 h24
paloaltonetworks pan-os Versi 10.2.7 h3
paloaltonetworks pan-os Versi 10.2.7 h32
paloaltonetworks pan-os Versi 10.2.7 h34
paloaltonetworks pan-os Versi 10.2.7 h35
paloaltonetworks pan-os Versi 10.2.7 h4
paloaltonetworks pan-os Versi 10.2.7 h5
paloaltonetworks pan-os Versi 10.2.7 h6
paloaltonetworks pan-os Versi 10.2.7 h7
paloaltonetworks pan-os Versi 10.2.7 h8
paloaltonetworks pan-os Versi 10.2.7 h9
paloaltonetworks pan-os Versi 10.2.10
paloaltonetworks pan-os Versi 10.2.10 h1
paloaltonetworks pan-os Versi 10.2.10 h10
paloaltonetworks pan-os Versi 10.2.10 h11
paloaltonetworks pan-os Versi 10.2.10 h12
paloaltonetworks pan-os Versi 10.2.10 h13
paloaltonetworks pan-os Versi 10.2.10 h14
paloaltonetworks pan-os Versi 10.2.10 h17
paloaltonetworks pan-os Versi 10.2.10 h18
paloaltonetworks pan-os Versi 10.2.10 h2
paloaltonetworks pan-os Versi 10.2.10 h21
paloaltonetworks pan-os Versi 10.2.10 h27
paloaltonetworks pan-os Versi 10.2.10 h3
paloaltonetworks pan-os Versi 10.2.10 h30
paloaltonetworks pan-os Versi 10.2.10 h31
paloaltonetworks pan-os Versi 10.2.10 h36
paloaltonetworks pan-os Versi 10.2.10 h37
paloaltonetworks pan-os Versi 10.2.10 h4
paloaltonetworks pan-os Versi 10.2.10 h5
paloaltonetworks pan-os Versi 10.2.10 h6
paloaltonetworks pan-os Versi 10.2.10 h7
paloaltonetworks pan-os Versi 10.2.13
paloaltonetworks pan-os Versi 10.2.13 h1
paloaltonetworks pan-os Versi 10.2.13 h10
paloaltonetworks pan-os Versi 10.2.13 h15
paloaltonetworks pan-os Versi 10.2.13 h16
paloaltonetworks pan-os Versi 10.2.13 h18
paloaltonetworks pan-os Versi 10.2.13 h2

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 203 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.