Tag: no-patch

All items tagged no-patch.

• CVE-2026-0300 — Palo Alto PAN-OS Captive Portal unauthenticated root RCE; CL-STA-1132 active since 2026-04-09; no patch until 2026-05-13
  in 2026-W19
• CL-STA-1132 — PAN-OS CVE-2026-0300 exploitation cluster: disclosure-to-deadline-to-deadline-expiry inside the window
  in 2026-W19
• BSI flags Netgate pfSense Community Edition as critical-unpatched — CVE-2025-69690 / CVE-2025-69691 authenticated root RCE, vendor refuses to fix
  in 2026-05-11
• Restrict pfSense CE management interfaces; assume no patch is coming
  in 2026-05-11