惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

阮一峰的网络日志
阮一峰的网络日志
Jina AI
Jina AI
GbyAI
GbyAI
D
DataBreaches.Net
人人都是产品经理
人人都是产品经理
Hugging Face - Blog
Hugging Face - Blog
V
Visual Studio Blog
P
Proofpoint News Feed
The Cloudflare Blog
H
Help Net Security
MyScale Blog
MyScale Blog
T
The Blog of Author Tim Ferriss
量
量子位
博
博客园 - 聂微东
Apple Machine Learning Research
Apple Machine Learning Research
T
Tailwind CSS Blog
博
博客园 - 三生石上(FineUI控件)
钛媒体：引领未来商业与生活新知
钛媒体：引领未来商业与生活新知
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
MongoDB | Blog
MongoDB | Blog
Last Week in AI
Last Week in AI
大猫的无限游戏
大猫的无限游戏
小众软件
小众软件
月光博客
月光博客

Wiz Blog | RSS feed

Meet Wiz for M365: Bringing SaaS into the Security Graph Bringing Security Visibility to Vercel with Wiz Axios NPM Distribution Compromised in Supply Chain Attack Tracking TeamPCP: Investigating Post-Compromise Attacks Seen in the Wild The Wiz Blue Agent, now Generally Available Beyond the Badge: What Achieving Microsoft’s Certified Software Designation Means for Your Cloud Security Introducing the Green Agent: AI-Powered Remediation for the Cloud Three’s a Crowd: TeamPCP trojanizes LiteLLM in Continuation of Campaign KICS GitHub Action Compromised: TeamPCP Strikes Again in Supply Chain Attack Introducing the Wiz Red Agent- AI-Powered Attacker Introducing Wiz AI Application Protection Platform (AI-APP) Introducing Wiz Agents & Workflows: Security at the Speed of AI AI Runtime Threat Detection: From Input to Real-World Impact Trivy Compromised: Everything You Need to Know about the Latest Supply Chain Attack It’s Official: Wiz Joins Google Understanding and Reducing AI Risk in Modern Applications Introducing Wiz Tenant Manager: Multi-Tenant Management for Federated Organizations The Agile FedRAMP Playbook, Part 4: Reactive Risk Management through Enriched Incident Response Wiz Achieves CPSTIC Certification in Spain Seeing AI Clearly: Building Visibility Across Modern AI Applications The Agile FedRAMP Playbook, Part 3: Preventative Risk Management by building Secure by Design Wiz Leads the 2026 Latio Application Security Report with awards in 4 categories Building an Agentic Cloud Security Ecosystem: A Reference Architecture with Wiz MCP and Infosys Cyber Next The Agile FedRAMP Playbook, Part 2: Proactive Risk Management with Continuous Monitoring Cloud-native Security for your Windows environment: Announcing the Wiz Runtime Sensor for Windows Would You Click ‘Accept’? Automatically detecting malicious Azure OAuth applications using LLMs Wiz Named a Leader in The Forrester Wave™: Cloud Native Application Protection Solutions, Q1 2026 From Detection to Remediation: It’s Time to Rethink AppSec Around Exploitability and Root Cause Fixes The Agile FedRAMP Playbook, Part 1: Why Risk is Your Best Starting Point Introducing AI Cyber Model Arena: A Real-World Benchmark for AI Agents in Cybersecurity
Critical Buffer Overflow Vulnerability in PAN-OS Exploite...
Merav Bar · 2026-05-06 · via Wiz Blog | RSS feed

A critical vulnerability (CVE-2026-0300) has been identified in Palo Alto Networks PAN-OS that allows unauthenticated attackers to achieve remote code execution (RCE) with root privileges. The issue affects the User-ID Authentication Portal (Captive Portal) and is actively exploited in limited cases, particularly when exposed to untrusted networks or the public internet.

What is CVE-2026-0300?

The vulnerability is a buffer overflow in the User-ID Authentication Portal service. By sending specially crafted network packets, an unauthenticated attacker can trigger an out-of-bounds write condition, ultimately leading to arbitrary code execution with root privileges on affected devices. The attack requires no authentication, user interaction, or special conditions beyond network access.

Exploitation risk is significantly higher when the Authentication Portal is exposed externally. The service is typically used for user identification workflows (e.g., captive portals), but when accessible from the Internet or untrusted networks, it becomes an entry point for remote attackers. The vulnerability has a CVSS score of 9.3, and Palo Alto has stated that it has already seen limited in-the-wild exploitation targeting exposed instances.

Limited details have been published as of May 6, 2026. Wiz will continue to update this blogpost when additional details will come to life.

Which products are affected?

ProductVersion BranchVulnerable VersionsFixed Version (ETA)
PAN-OS12.1< 12.1.4-h512.1.4-h5 (05/13)
PAN-OS12.1< 12.1.712.1.7 (05/28)
PAN-OS11.2< 11.2.4-h1711.2.4-h17 (05/28)
PAN-OS11.2< 11.2.7-h1311.2.7-h13 (05/13)
PAN-OS11.2< 11.2.10-h611.2.10-h6 (05/13)
PAN-OS11.2< 11.2.1211.2.12 (05/28)
PAN-OS11.1< 11.1.4-h3311.1.4-h33 (05/13)
PAN-OS11.1< 11.1.6-h3211.1.6-h32 (05/13)
PAN-OS11.1< 11.1.7-h611.1.7-h6 (05/28)
PAN-OS11.1< 11.1.10-h2511.1.10-h25 (05/13)
PAN-OS11.1< 11.1.13-h511.1.13-h5 (05/13)
PAN-OS11.1< 11.1.1511.1.15 (05/28)
PAN-OS10.2< 10.2.7-h3410.2.7-h34 (05/28)
PAN-OS10.2< 10.2.10-h3610.2.10-h36 (05/13)
PAN-OS10.2< 10.2.13-h2110.2.13-h21 (05/28)
PAN-OS10.2< 10.2.16-h710.2.16-h7 (05/28)
PAN-OS10.2< 10.2.18-h610.2.18-h6 (05/13)

What is the risk to cloud environments?

While Wiz data indicates that 7% of environments have publicly exposed PAN-OS instances, Palo Alto Networks specifies that the vulnerability is within the User-ID Authentication Portal. Since this portal utilizes ports 6081 and 6082, the exposure of these specific ports is the primary metric for exploitability. Currently, Shodan identifies 67 exposed PAN-OS servers on port 6081, with none detected on port 6082.

What steps should security teams take?

  1. Apply patches immediately once fixed versions become available for your PAN-OS release branch

  2. Restrict access to the User-ID Authentication Portal to trusted internal IP addresses only

  3. Disable the Authentication Portal if it is not required

  4. Avoid exposing the portal to the internet or untrusted networks

How can Wiz help?

Wiz customers can use the pre-built queries and advisory in the Wiz Threat Intel Center to search for relevant instances in their environment.

References

此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。