Critical PAN-OS RCE Flaw Exploited, Awaiting Patch
NEOSEC enrichment — no mirror of the original source
Palo Alto Networks (PAN) has published a security advisory disclosing a critical flaw in PAN-OS that is under active exploitation but will not be patched until May 13, 2026 at the earliest. CVE-2026-0300, CVSS score 9.3, allows an unauthent
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at SANS NewsBitesLinked advisories
Affected vendors and products
More on Awaiting
Other advisories
- LowCVE-2026-82743Ash.Actions.Read.AsyncLimiter busy-spins a scheduler while awaiting slow async reads
- Not ratedosv:CVE-2026-82743Ash.Actions.Read.AsyncLimiter busy-spins a scheduler while awaiting slow async reads
- HighCVE-2026-67260Apache Airflow: DAG-author remote code execution on the Scheduler via awaiting_input next_kwargs deserialization
- Not ratedosv:CVE-2026-67260Apache Airflow: DAG-author remote code execution on the Scheduler via awaiting_input next_kwargs deserialization
Source: https://security.paloaltonetworks.com/
ID