Palo Alto Networks Warns of Firewall RCE Zero-Day Exploited In Attacks

2026-05-07

Palo Alto Networks warned users of a critical, unpatched vulnerability in the PAN-OS User-ID Authentication Portal. The vulnerability stems from a buffer overflow and can be exploited by attackers to execute arbitrary code as root. Palo Alto Networks is working on a fix and recommends users restrict or disable access to the portals in the meantime.