CVE-2026-0283
CVE-2026-0283: 1 tracked advisory record across Palo Alto. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Palo Alto
1 advisory- Advisory severityHigh7.8
High [CVE-2026-0283] PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN)
CVE-2026-0283Source published
An authentication bypass vulnerability in Large Scale VPN ( LSVPN) functionality of Palo Alto Networks PAN-OS software allows an attacker with network access to bypass security restrictions and establish an unauthorized site-to-site VPN connection. Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.
- Affected products in this advisory
- PAN-OS
- Source-reported affected versions
- PAN-OS < 12.1.8
- PAN-OS < 11.2.13
- PAN-OS < 11.1.16
- PAN-OS < 10.2.18-h8
- Source-reported fixed versions
- PAN-OS >= 12.1.8
- PAN-OS >= 12.1.7-h2
- PAN-OS >= 12.1.4-h8
- PAN-OS >= 11.2.13
14 more entries in the full advisory.
- Mitigation guidance
- VersionMinor VersionSuggested SolutionCloud NGFW AllNo action needed.
- PAN-OS 12.1 12.1.5 through 12.1.7-h* Upgrade to 12.1.7-h2 or 12.1.8 or later. 12.1.2 through 12.1.4-h* Upgrade to 12.1.4-h8 or 12.1.8 or later.
- Workarounds
- Customers with a Threat Prevention subscription are provided with limited coverage against this vulnerability when enabling Threat ID 510032 (from Applications and Threats content version 9122-10145 and later).
- To ensure the Threat ID provides effective protection against this vulnerability, ensure that vulnerability protection security profile is applied to your GlobalProtect interface.
Android app · Google Play
Monitor future Palo Alto CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.