Palo Alto Networks has issued a warning about a critical unpatched vulnerability (CVE-2026-0300) in its PAN-OS User-ID Authentication Portal, which is currently being exploited by attackers to execute arbitrary code on exposed firewalls. The company advises customers to restrict access to this feature or disable it until a patch is released, expected on May 13, 2026.
Palo Alto Networks has identified a critical zero-day vulnerability (CVE-2026-0300) in its PAN-OS User-ID Authentication Portal, which is being actively exploited and allows unauthenticated attackers to execute code with root privileges. Until a patch is available, it is crucial for security teams to mitigate this risk by restricting access to the User-ID Authentication Portal to trusted networks only or disabling it if necessary. This proactive measure can significantly reduce exposure to this high-severity threat.