Recorded 23 Oct 2026 at 08:31 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position.
See the latest record.
The historical “Vendor advisory” caption recorded a reference cited by CISA. It does not verify that the vendor authored that page. The original caption and address remain below.
Palo Alto Networks PAN-OS contains an out-of-bounds write vulnerability in the User-ID Authentication Portal (aka Captive Portal) service that can allow an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets.