Product:
PAN-OS
Summary
An authentication bypass vulnerability in Palo Alto Networks PAN-OS software allows an unauthenticated attacker with network access to bypass authentication controls when Cloud Authentication Service is enabled. The risk is heightened if CAS is enabled on the management interface. This issue affects PAN-OS software on PA-Series and VM-Series firewalls and on Panorama.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.2 | CVE-2026-0265 |
Exploitation
To exploit this vulnerability, an attacker must have network access to the affected device and can bypass authentication controls when the Cloud Authentication Service is enabled. This can lead to unauthorized access to the management interface, especially if it is not properly secured against untrusted IP addresses.
Affected Products
- PA-Series firewalls: Affected by the authentication bypass vulnerability when CAS is enabled.
- VM-Series firewalls: Vulnerable under the same conditions as PA-Series.
- Panorama: Both virtual and M-Series versions are impacted by this issue.
Mitigation
To mitigate this vulnerability, it is recommended to secure access to the management web interface by restricting access to only trusted internal IP addresses. Following best practice deployment guidelines can significantly reduce the risk associated with this vulnerability.