NetSight
high7.2

CVE-2026-0283

An authentication bypass vulnerability in Large Scale VPN ( LSVPN) functionality of Palo Alto Networks PAN-OS software allows an attacker with network access t…

Impact

An authentication bypass vulnerability in Large Scale VPN ( LSVPN) functionality of Palo Alto Networks PAN-OS software allows an attacker with network access to bypass security restrictions and establish an unauthorized site-to-site VPN connection. Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.

Affected products

VendorProductAffected versions
PaloaltonetworksPan-Os
from 10.2.0 before 10.2.7
from 10.2.8 before 10.2.10
from 10.2.11 before 10.2.13
from 10.2.14 before 10.2.16
Versions 10.2.7, 10.2.10

Weakness classification

References