CVE-2026-0280
HIGHDescription
An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to bypass firewall security policy enforcement, allowing network traffic that should be blocked to reach protected services. Cloud NGFW and Panorama are not impacted by this vulnerability.
Is your site exposed to CVE-2026-0280?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
7.2
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
EPSS — Exploit Prediction
0.0018
Probability of exploitation
0.08%
Percentile rank
EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.
Weakness Type (CWE)
CWE-131
CWE-131
Affected Products
| Vendor | Product |
|---|---|
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
| paloaltonetworks | pan-os |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2026-0280? +
An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to bypass firewall security policy enforcement, allowing network traffic that should be blocked to reach protected services.
Cloud NGFW and Panorama are not impacted by this vulnerability. It has a CVSS v3.1 base score of 7.2 (HIGH).
How severe is CVE-2026-0280? +
CVE-2026-0280 has a CVSS v3.1 score of 7.2 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching. The EPSS score is 0.0018, placing it in the 0th percentile for exploitation probability.
What products are affected by CVE-2026-0280? +
CVE-2026-0280 affects products from paloaltonetworks, specifically: pan-os. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2026-0280? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.
Related Vulnerabilities
CVE-2026-112709
A heap-based buffer overflow vulnerability in the Fireware OS authentication service allows an attacker who controls or intercepts traffic to …
CVE-2026-61383
Incorrect calculation of buffer size in the MigTD's servtd_get_quote for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: …
CVE-2026-95509
Strings optimized for Latin-1 displaying Latin-1 characters cause incorrect String.arg() formatting by an incorrect buffer size calculation, causing out-of-bounds reading.
CVE-2026-47773
ArduinoBLE enables Bluetooth Low Energy connectivity on certain Arduino models. Versions prior to 2.0.2 contain a missing bounds check in …
CVE-2026-112710
A heap-based buffer overflow vulnerability exists in the Fireware OS authentication service allows an attacker who controls or intercepts traffic …
CVE-2026-102729
`gx_binres_theme_load()` sizes its theme buffer for the theme it was asked for, and allocates it even when the resource holds …
