Palo Alto Networks Firewall Zero-Day RCE Vulnerability Exploited in the Wild Since April
A critical zero-day vulnerability in Palo Alto Networks PAN-OS software has been actively exploited by a likely state-sponsored threat actor since at least April 2026, the company revealed in a security advisory published on May 6, 2026. Tracked as CVE-2026-0300, the flaw is a buffer overflow vulnerability residing in the User-ID Authentication Portal, also known […] The post Palo Alto Networks Firewall Zero-Day RCE Vulnerability Exploited in the Wild Since April appeared first on Cyber Security News.
A state-sponsored threat actor has exploited a Palo Alto Networks PAN-OS zero-day vulnerability (CVE-2026-0300) since at least April 2026, allowing arbitrary code execution with root privileges on PA-Series and VM-Series firewalls. The vulnerability is a buffer overflow in the User-ID Authentication Portal service.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HRead the full article
This is a curated summary. The complete article is available at Cyber Security News.