CVE-2026-0283

An authentication bypass vulnerability in Large Scale VPN ( LSVPN) functionality of Palo Alto Networks PAN-OS software allows an attacker with network access to bypass security restrictions and establish an unauthorized site-to-site VPN connection. Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.

Score

CVSS 3.1 7.2 High

Status

Modified - psirt@paloaltonetworks.com

Published

2026-07-09

Last modified

2026-10-15

Weaknesses

CWE-306

Affected products

• Pan-os (Palo Alto Networks)
• Pan-os (Paloaltonetworks)
• Ruggedcom Ape1808 (Siemens)

References

• https://security.paloaltonetworks.com/CVE-2026-0283
• https://cert-portal.siemens.com/productcert/html/ssa-104023.html