PT-2026-56554 · Palo Alto Networks · Pan-Os

Curious · Published 2026-07-08 · Updated 2026-07-09 · CVE-2026-0280

Positive Technologies (AI Summary)

CVSS v4.0

1.7

Low

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:D/RE:M/U:Amber

Name of the Vulnerable Software and Affected Versions PAN-OS (affected versions not specified)

Description An issue in the dataplane of the software allows an unauthenticated attacker to bypass firewall security policy enforcement via IPv6 packet processing. This enables network traffic that should be blocked to reach protected services.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-131

Related Identifiers

CVE-2026-0280

Affected Products

Pan-Os

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-0280 · Security Note
• https://security.paloaltonetworks.com/CVE-2026-0280 · Vendor Advisory
• https://twitter.com/SCOTTHOGG/status/2074910988990902583 · Twitter Post