Back to the CVE list
CVE-2026-0300 CISA KEV · Actively exploitedSuited to automated attack · CISA

PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal

CVSS score

9.3

EPSS probability

%31.7

Risk score

5.9

Published

5 mo ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

Scanner: CVE-2026-0300 PAN-OS User-ID Captive Portal Buffer Overflow RCE — Python CLI for detecting actively exploited BOF vulnerability in Palo Alto firewalls (CISA KEV 2026-05-13)

Public PoCSource updated: 10.08.2026 06:30:24

Palo Alto - CVE-2026-0300 exploit

Public PoCSource updated: 06.08.2026 13:15:54

CVE-2026-0300 PAN-OS 12.1, 11.2, 11.1, 10.2

Public PoCSource updated: 21.05.2026 21:09:58

p3Nt3st3r-sTAr/CVE-2026-0300-POC

Public PoCSource updated: 13.09.2026 08:25:42

PAN-OS CVE-2026-0300 Non-Destructive Exposure Survey Tool

Public PoCSource updated: 10.07.2026 03:05:15

Security Research and Proof-of-Concept (PoC) for CVE-2026-0300 : Unauthenticated Remote Code Execution (RCE) in Palo Alto Networks PAN-OS User-ID Portal.

Public PoCSource updated: 09.09.2026 16:31:05

Read-only audit tooling for CVE-2026-0300 (PAN-OS User-ID Authentication Portal exposure)

Public PoCSource updated: 06.05.2026 13:52:53

CVE-2026-0300

Public PoCSource updated: 09.10.2026 11:09:37

a honeypot for CVE-2026-0300

Public PoCSource updated: 25.08.2026 13:39:41

A research-grade Proof-of-Concept (PoC) for CVE-2026-0300, targeting the Buffer Overflow vulnerability in Palo Alto Networks PAN-OS User-ID™ Authentication Portal (CWE-787).

Public PoCSource updated: 21.08.2026 06:15:04

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-0300"