NEW: Group Profiler — instant APT intel lookup.Try it →

CVE-2026-0300

Reported by 4 distinct sources tracked by ThreatFilter. First reported 2026-05-06 00:00 UTC, most recent 2026-05-07 02:10 UTC.

HIGH 9.3CISA KEVEXPLOITEDpalo-alto

Corroboration timeline

Each row is the first time that source reported this CVE, so the lag column shows how long each took relative to the earliest report. Corroboration across distinct sources is a confidence signal that a single advisory cannot give you.

  1. cisa-kev2026-05-06 00:00 UTCfirst report

    CVE-2026-0300 — Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability

  2. rapid7-blog2026-05-06 13:27 UTC+13h

    Critical Buffer Overflow in Palo Alto Networks PAN-OS User-ID Authentication Portal (CVE-2026-0300)

  3. nvd-cve2026-05-06 19:16 UTC+19h

    CVE-2026-0300 — A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software all

  4. palo-alto-psirt2026-05-07 02:10 UTC+26h

    CVE-2026-0300 PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal (Severity: CRITICAL)

How this page is built

ThreatFilter ingests 52 public threat-intelligence feeds. A page is published here only when at least 3 distinct sources report the same CVE — roughly 0.2% of the CVEs seen. Everything above is derived from those feeds; nothing is hand-written, and the timeline is the raw record of what each source published and when.

See the live advisory feed, the full source list, or the analyst tools.