Skip to content
CVE PROGRAM SOURCE RECORD1.7 Low

CVE-2026-0280

PAN-OS: IPv6 Firewall Policy Bypass

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to bypass firewall security policy enforcement, allowing network traffic that should be blocked to reach protected services. Cloud NGFW and Panorama are not impacted by this vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks Cloud NGFW

Default version status: unaffected

  • Allunaffected

Palo Alto Networks PAN-OS

Default version status: unaffected

  • 12.1.0 to < 12.1.8affected
  • 11.2.0 to < 11.2.13affected
  • 11.1.0 to < 11.1.16affected
  • 10.2.0 to < 10.2.18-h8affected

Palo Alto Networks Panorama

Default version status: unaffected

  • Allunaffected

Palo Alto Networks Prisma Access

Default version status: unaffected

  • 11.2.0 to < 11.2.7-h18affected
  • 10.2.0 to < 10.2.10-h39affected

References