VULNERABILITY INTELLIGENCE

CVE-2026-0283

CVSS score7.2 HIGH
EPSS probability0.38%
CISA KEVNot currently listed
Published2026-07-09
Last modified2026-08-11
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Description

An authentication bypass vulnerability in Large Scale VPN ( LSVPN) functionality of Palo Alto Networks PAN-OS software allows an attacker with network access to bypass security restrictions and establish an unauthorized site-to-site VPN connection. Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.

Weakness classification

  • psirt@paloaltonetworks.com: CWE-306

Primary references