CVE-2026-0280
Medium
Elevated severity or exploit probability.
CVSS base
7.2
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
EPSS — probability of exploitation (30 days)
0.3%
24.6th percentile
CISA KEV
Not listed
Weakness / dates
CWE-131
Published 2026-07-09 · modified 2026-08-11
Description
An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to bypass firewall security policy enforcement, allowing network traffic that should be blocked to reach protected services. Cloud NGFW and Panorama are not impacted by this vulnerability.