# CVE-2026-0280

## Summary

- **CVE ID:** CVE-2026-0280
- **Severity:** LOW
- **CVSS Score:** 1.7 (CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U/AU:Y/V:D/RE:M/U:Amber)
- **CWE:** CWE-131
- **Published:** Jul 9, 2026
- **Last Modified:** Aug 11, 2026

## Description

An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to bypass firewall security policy enforcement, allowing network traffic that should be blocked to reach protected services.

Cloud NGFW and Panorama are not impacted by this vulnerability.

## Affected Products

- Palo Alto Networks — Cloud NGFW (All)
- Palo Alto Networks — PAN-OS (12.1.0)
- Palo Alto Networks — PAN-OS (11.2.0)
- Palo Alto Networks — PAN-OS (11.1.0)
- Palo Alto Networks — PAN-OS (10.2.0)
- Palo Alto Networks — Panorama (All)
- Palo Alto Networks — Prisma Access (11.2.0)
- Palo Alto Networks — Prisma Access (10.2.0)

## References

- [CNA](https://security.paloaltonetworks.com/CVE-2026-0280)
- [siemens-SADP](https://cert-portal.siemens.com/productcert/html/ssa-104023.html)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.31%
- **EPSS Percentile:** 24.1

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-11._