CVE-2026-0283 | THREATINT

Description

An authentication bypass vulnerability in Large Scale VPN ( LSVPN) functionality of Palo Alto Networks PAN-OS software allows an attacker with network access to bypass security restrictions and establish an unauthorized site-to-site VPN connection. Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.

PUBLISHED Reserved 2025-11-03 | Published 2026-07-09 | Updated 2026-07-09 | Assigner palo_alto

MEDIUM: 4.5CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:H/SI:L/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

The risk is highest when you allow access to the management interface from external IP addresses on the internet.

Problem types

CWE-306 Missing Authentication for Critical Function

Product status

Default status

unaffected

All (custom)

unaffected

Default status

unaffected

12.1.0 (custom) before 12.1.8

affected

11.2.0 (custom) before 11.2.13

affected

11.1.0 (custom) before 11.1.16

affected

10.2.0 (custom) before 10.2.18-h8

affected

Default status

unaffected

All (custom)

unaffected

Timeline

2026-07-08:

Initial publication

Credits

Vaibhav Nagar (internal reporter) and our internal security research teams finder

References

security.paloaltonetworks.com/CVE-2026-0283 vendor-advisory

cve.org (CVE-2026-0283)

nvd.nist.gov (CVE-2026-0283)

Download JSON