Buffer Overflow Vulnerability in Palo Alto Networks PAN-OS Software
CVE-2026-0326

1.7LOW

Key Information:

Vendor

Palo Alto Networks
Status
Cloud Ngfw
Pan-os
Prisma Access
Vendor
CVE Published:
11 November 2026

Badges

👾 Exploit Exists

What is CVE-2026-0326?

A buffer overflow vulnerability has been identified in Palo Alto Networks PAN-OS software. This flaw allows an unauthenticated attacker to exploit the system, leading to possible service disruptions through crashes or memory corruption. Important to note, this vulnerability does not affect other products such as Panorama or Prisma® Access. Organizations using PAN-OS are advised to assess their systems and apply relevant updates to mitigate potential risks.

Affected Version(s)

Cloud NGFW All

PAN-OS 12.2.0 < 12.2.4-h2

PAN-OS 12.1.0 < 12.1.10-h4

References

https://security.paloaltonetworks.com/CVE-2026-0326
vendor-advisory

CVSS V4

Score:
1.7
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

OpenAI
Rotem Bar (internal reporter)
Ben Nott (internal reporter)
.