CVE-2026-0280

No fix known EPSS <1%CVSS 1.7

An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to bypass firewall security policy enforcement, allowing network traffic that should be blocked to reach protected services. Cloud NGFW and Panorama are not impacted by this vulnerability.

Published 2026-07-09 · CVE record · OSV

Products: Palo Alto Networks Cloud NGFW, Palo Alto Networks PAN-OS, Palo Alto Networks Panorama, Palo Alto Networks Prisma Access, Siemens RUGGEDCOM APE1808