https://reddit.com/r/Infosec/comments/1t9y7jd/title_cve20260300_preauth_root_rce_in_panos_cisa/: Title: CVE-2026-0300: Pre-Auth Root RCE in PAN-OS — CISA KEV, No Patch Until May 13

Published May 11, 2026

Updated

Affected Software

1 affected component

Palo Alto Networks PAN-OS User-ID Authentication Portal

CVE-2026-0300 is classified as critical due to its potential for unauthenticated remote code execution.

As of now, there is no patch available for CVE-2026-0300 until May 13, so immediate mitigation steps are recommended until then.

CVE-2026-0300 affects the Palo Alto Networks PAN-OS User-ID Authentication Portal.

CVE-2026-0300 is exploited through a buffer overflow vulnerability that allows unauthenticated users to execute arbitrary code.

If your system is vulnerable to CVE-2026-0300, apply any recommended workarounds and monitor for updates regarding the available patch.