Palo Alto Networks to Patch Zero-Day Exploited to Hack Firewalls
Summary
Palo Alto Networks is preparing to release a patch for a zero-day vulnerability in its PAN-OS software that has been actively exploited to compromise firewalls. The vulnerability, identified as CVE-2026-0300, impacts the Captive Portal service on PA and VM series firewalls.
IFF Assessment
FOE
The active exploitation of a zero-day vulnerability in a widely used firewall product represents a significant threat to organizations' network security.
Severity
9.8
Critical
Defender Context
Defenders should prioritize patching their Palo Alto Networks firewalls as soon as the update is available to mitigate the risk of exploitation. It is crucial to monitor network traffic for any signs of compromise that might indicate prior exploitation of this vulnerability.