cybercrime.clubhttps://cybercrime.club/tags/palo-alto-networks/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usWed, 06 May 2026 23:10:50 -0400Palo Alto PAN-OS CVE-2026-0300: Unauthenticated Root RCE on Captive Portal Exploited in the Wild, No Patch Until May 13https://cybercrime.club/posts/palo-alto-pan-os-cve-2026-0300-captive-portal-zero-day-rce/Wed, 06 May 2026 23:10:50 -0400https://cybercrime.club/posts/palo-alto-pan-os-cve-2026-0300-captive-portal-zero-day-rce/An unauthenticated buffer overflow in the PAN-OS User-ID Authentication Portal hands attackers root on PA-Series and VM-Series firewalls. Limited exploitation is already underway; first patches arrive May 13.vulnerability