1. Home
  2. CVE Database
  3. CVE-2026-0280
HIGH · 7.2

CVE-2026-0280

An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to bypass firewall security policy enforcement, allowing network tra...

Vulnerability Description

An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to bypass firewall security policy enforcement, allowing network traffic that should be blocked to reach protected services. Cloud NGFW and Panorama are not impacted by this vulnerability.

CVSS Score

7.2

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
PaloaltonetworksPan-Os>= 10.2.0, < 10.2.7

Related Weaknesses (CWE)

CWE-131

References

FAQ

What is CVE-2026-0280?

CVE-2026-0280 is a vulnerability with a CVSS score of 7.2 (HIGH). An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to bypass firewall security policy enforcement, allowing network tra...

How severe is CVE-2026-0280?

CVE-2026-0280 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-0280?

Check the references section above for vendor advisories and patch information. Affected products include: Paloaltonetworks Pan-Os.