← CVE Radar
CVE-2026-0280PAN-OS: IPv6 Firewall Policy Bypass
An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to bypass firewall security policy enforcement, allowing network traffic that should be blocked to reach protected services. Cloud NGFW and Panorama are not impacted by this vulnerability.
1.7 LOWEPSS 0.33%Not in KEVNVD: Modified
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 1.7 | LOW | 4.0palo_alto (CNA) | CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U/AU:Y/V:D/RE:M/U:Amber |
| 7.2 | HIGH | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N |
Details
- CVE ID
- CVE-2026-0280
- Status
- Modified
- Assigner (CNA)
- palo_alto
- Published
- Jul 9, 2026
- Last modified
- 2026-10-15 01:11 UTC
- Weaknesses
- CWE-131 · Incorrect Calculation of Buffer Size
Affected Products
As published by the CNA in the CVE record.
Palo Alto NetworksCloud NGFW0 version ranges
No version detail published.
Palo Alto NetworksPAN-OS4 version ranges
- 12.1.0 before 12.1.8
- 11.2.0 before 11.2.13
- 11.1.0 before 11.1.16
- 10.2.0 before 10.2.18-h8
Palo Alto NetworksPanorama0 version ranges
No version detail published.
Palo Alto NetworksPrisma Access2 version ranges
- 11.2.0 before 11.2.7-h18
- 10.2.0 before 10.2.10-h39