CISA Warns of Palo Alto PAN-OS Vulnerability Exploited to Gain Root Access

CISA warns of CVE-2026-0300, a critical out-of-bounds write vulnerability in the PAN-OS Captive Portal that allows unauthenticated remote code execution and root access on Palo Alto PA- and VM-Series firewalls; CISA has added it to its Known Exploited Vulnerabilities catalog and active exploitation has been observed, so organizations must restrict access to the User-ID Authentication Portal and apply mitigations until an official patch is released.