This vulnerability (CVE-2026-0283) involves missing authentication for a critical function (CWE-306) in the Large Scale VPN (LSVPN) feature of Palo Alto Networks PAN-OS software. An attacker who has network access can exploit this flaw to bypass authentication controls and create unauthorized site-to-site VPN connections. The issue does not impact Panorama, Cloud NGFW, or Prisma Access products. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, with low confidentiality, integrity, and availability impacts, and a medium overall severity. No known exploits are reported in the wild and no patch or remediation level has been disclosed.

An attacker with network access can bypass authentication controls in the LSVPN functionality, potentially establishing unauthorized site-to-site VPN connections. This could allow unauthorized network access between sites, undermining network security controls. However, the impact is rated medium due to limited confidentiality, integrity, and availability impacts and no known exploitation in the wild. Critical Palo Alto Networks products such as Panorama, Cloud NGFW, and Prisma Access are not affected.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level has been published, organizations should monitor Palo Alto Networks advisories for updates. In the meantime, restrict network access to the LSVPN functionality to trusted sources only and consider additional network segmentation or access controls to limit exposure.