
- A critical buffer overflow flaw (CVE‑2026‑0300) in PAN‑OS User‑ID Authentication Portal is under limited exploitation
- The bug allows unauthenticated code execution with root privileges on exposed firewalls
- Palo Alto advised restricting portals to trusted networks; fixes are due May 13, 2026
PAN-OS User-ID Authentication Portal, a feature in Palo Alto Networks firewalls that identifies and authenticates users on a network, contains a critical-severity zero-day vulnerability which is being exploited in limited attacks, the company has warned.