This vulnerability (CVE-2026-0283) involves missing authentication for a critical function in the LSVPN feature of Palo Alto Networks PAN-OS software. An attacker with network access can exploit this flaw to bypass authentication controls and create unauthorized site-to-site VPN connections. The issue does not impact Panorama, Cloud NGFW, or Prisma Access. There is no vendor advisory or patch information provided, and no known exploits in the wild have been reported.

An attacker with network access can bypass authentication and establish unauthorized site-to-site VPN connections, potentially allowing unauthorized network access through the affected PAN-OS devices. However, the impact is limited to PAN-OS software's LSVPN functionality and does not affect Panorama, Cloud NGFW, or Prisma Access. The medium CVSS score reflects moderate risk due to the need for network access and the limited scope of affected products.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is indicated in the provided data, users should monitor Palo Alto Networks advisories for updates. No specific mitigation steps are provided by the vendor at this time.