Palo Alto PAN-OS Flaw Under Active Exploitation Enables Remote Code Execution

Palo Alto Networks has issued a security advisory regarding a critical buffer overflow vulnerability in PAN-OS that is being actively exploited. The vulnerability, identified as CVE-2026-0300, allows unauthenticated remote code execution and has a CVSS score of 9.3 when the User-ID Authentication Portal is configured to permit internet access.