What is CVE-2026-0265?

CVE-2026-0265 is a high-severity vulnerability in Palo Alto Networks Cloud Ngfw, classified under Improper Verification of Cryptographic Signature. CVSS score: 8.1/10. Published 2026-05-13.

How severe is CVE-2026-0265?

High severity. CVSS v3 base score is 8.1 out of 10.

Is CVE-2026-0265 known to be exploited?

3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Palo Alto Networks Cloud Ngfw

CVE-2026-0265

An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to bypass authentication controls when Cloud Authentication Service (CAS) is enabled. The risk is higher if CAS is enabled on the management interface and lower when any other login interfaces are used. The risk of this issue is greatly reduced if you secure access to the management web interface by restricting access to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma Access® are not impacted by this vulnerability.

EPSS: 0.011 (62.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Palo Alto Networks Cloud Ngfw — versions All
Palo Alto Networks Pan-os — versions 12.1.0, 11.2.0, 11.1.0
Palo Alto Networks Prisma Access — versions All
Paloaltonetworks Pan-os — versions 10.2.7, 10.2.10, 10.2.13
Siemens Ruggedcom_ape1808
Siemens Ruggedcom_ape1808_firmware

Weakness classification (CWE)

CWE-347 — Improper Verification of Cryptographic Signature

Public proof-of-concept exploits

References

psirt@paloaltonetworks.com (vendor-advisory, Vendor Advisory)
0b142b55-0307-4c5a-b3c9-f314f3fb7c5e (Third Party Advisory)

Frequently asked questions

What is CVE-2026-0265?: CVE-2026-0265 is a high-severity vulnerability in Palo Alto Networks Cloud Ngfw, classified under Improper Verification of Cryptographic Signature. CVSS score: 8.1/10. Published 2026-05-13.
How severe is CVE-2026-0265?: High severity. CVSS v3 base score is 8.1 out of 10.
Is CVE-2026-0265 known to be exploited?: 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.