The Palo Alto Patch Window You Cannot Afford to Miss. Here is the 48-Hour Plan.
Palo Alto Networks disclosed CVE-2026-0300 on May 6, 2026. It is an unauthenticated buffer overflow in the PAN-OS User-ID Authentication Portal that lets a remote attacker execute code as root. CVSS 9.3. Early exploitation has been observed in the wild and is expected to accelerate. First fixes are landing May 13. A second wave follows…