CVE-2026-0300

Vendor

Palo Alto Networks, Rapid7

Product

PAN-OS, InsightVM / Nexpose / Metasploit

EPSS

0.42 (p99)

Exposure class

Edge / VPN / firewall, Network management

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 57
   Wiz Research Wiz 6 May 2026

   Critical Buffer Overflow Vulnerability in PAN-OS Exploited in-the-Wild

   Detect and mitigate CVE-2026-0300, a critical vulnerability in Palo Alto Networks PAN-OS User-ID Authentication Portal that allows unauthenticated attackers to achieve remote code execution (RCE) with root privileges.

   Exploited EPSS 0.42 CVE-2026-0300 Palo Alto Networks
2. 52
   Research Rapid7 7d ago

   The Race Against the 3-Day Clock: How Rapid7 Helps Meet BOD 26-04 Compliance

   Introduction to BOD 26-04 On June 10, 2026, CISA issued Binding Operational Directive 26-04, "Prioritizing Security Updates Based on Risk." Strip away the regulatory language and it reads like a single operational fact: for a…

   Exploited EPSS 0.15 CVE-2026-55040CVE-2026-63520CVE-2026-0300+2 more Rapid7