Vulnerability-Lookup

CVE-2026-0326 (GCVE-0-2026-0326)

Vulnerability from cvelistv5 – Published: 2026-11-11 19:50 – Updated: 2026-11-11 19:50

Title

PAN-OS: Buffer Overflow Vulnerability in Protocol and Service Processing

Summary

A buffer overflow vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to disrupt service processing by causing a service process crash or memory corruption. Panorama and Prisma® Access are not affected by this vulnerability.

Severity

1.7 (Low)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

CWE

CWE-787 - Out-of-bounds Write

Assigner

palo_alto CNA

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0326	vendor-advisory

Impacted products

3 products

Vendor	Product	Version
Palo Alto Networks	Cloud NGFW	Affected: All (custom)
Palo Alto Networks	PAN-OS	Affected: 12.2.0 , < 12.2.4-h2 (custom) Affected: 12.1.0 , < 12.1.10-h4 (custom) Affected: 11.2.0 , < 11.2.16-h2 (custom) Affected: 11.1.0 , < 11.1.16-h5 (custom) cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:h1:::::: cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:-:::::: cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:::::::* cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:::::::* cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h3:::::: cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h2:::::: cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:::::: cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:::::::* cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:::::::* cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:::::::* cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:::::::* cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:::::::* cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:::::::* cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:::::::* cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:h1:::::: cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:-:::::: cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h4:::::: cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h3:::::: cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:::::: cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:::::: cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:::::: cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:::::::*
Palo Alto Networks	Prisma Access	Unaffected: All (custom)

Date Public

2026-11-11 17:00

Credits

OpenAI Rotem Bar (internal reporter) Ben Nott (internal reporter)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Cloud NGFW",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "affected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "PAN-OS",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.2.4-h2",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.2.4-h2",
              "status": "affected",
              "version": "12.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "12.1.10-h4",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.1.10-h4",
              "status": "affected",
              "version": "12.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.2.16-h2",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.2.16-h2",
              "status": "affected",
              "version": "11.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.1.16-h5",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.1.16-h5",
              "status": "affected",
              "version": "11.1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Prisma Access",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eCustomers are impacted if the following conditions are true:\u003c/p\u003e\u003col\u003e\u003cli\u003e\u003cp\u003eSCTP is enabled\u0026nbsp;\u003cb\u003eor\u003c/b\u003e\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eDNS proxy object is configured and enabled on the firewall\u0026nbsp;\u003cb\u003eor\u003c/b\u003e\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eOSPFv3 routing on an IPv6 interface is enabled.\u003c/p\u003e\u003c/li\u003e\u003c/ol\u003e\u003cdiv\u003eTo check if SCTP is enabled:\u0026nbsp;\u003cbr\u003e\u003cul\u003e\u003cli\u003eNavigate to \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/ngfw/help/10-2/device/device-setup-management\"\u003eDevice \u0026gt; Setup \u0026gt; Management\u003c/a\u003e \u0026gt; General Settings and check if \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/service-providers/10-2/mobile-network-infrastructure-getting-started/sctp/configure-sctp-security\"\u003eSCTP Security\u003c/a\u003e is checked.\u003cbr\u003e\u003c/li\u003e\u003cli\u003eNavigate to \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/ngfw/help/10-2/policies/policies-security\"\u003ePolicies \u0026gt; Security\u003c/a\u003e, inspect your active policy rules, and verify if an \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/ngfw/help/10-1/objects/objects-security-profiles-sctp-protection\"\u003eSCTP Protection profile\u003c/a\u003e is applied under the rule\u0027s Actions tab to a rule allowing SCTP traffic.\u003c/li\u003e\u003c/ul\u003eVerify DNS Proxy Status:\u003cbr\u003e\u003cul\u003e\u003cli\u003eNavigate to Network \u0026gt; \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/ngfw/help/10-1/network/network-dns-proxy\"\u003eDNS Proxy\u003c/a\u003e.\u003cbr\u003e\u003c/li\u003e\u003cli\u003eReview all configured DNS Proxy objects.\u003cbr\u003e\u003c/li\u003e\u003cli\u003eClick to open each DNS Proxy object and verify whether the \u003cb\u003eEnable\u003c/b\u003e checkbox is selected.\u003c/li\u003e\u003c/ul\u003eVerify OSPFv3 routing on IPv6\u003cbr\u003e\u003cul\u003e\u003cli\u003eNavigate to \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/ngfw/help/10-2/network/network-virtual-routers\"\u003eNetwork \u0026gt; Virtual Routers\u003c/a\u003e (or \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/ngfw/networking/advanced-routing\"\u003eAdvanced Routing\u003c/a\u003e), open your active virtual router, and check under \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/ngfw/networking/ospf/configure-ospfv3\"\u003eOSPFv3\u003c/a\u003e to confirm if OSPFv3 routing is enabled on any IPv6 interface or subinterface.\u003c/li\u003e\u003cli\u003e\u003cp\u003eNavigate to \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/ngfw/networking/advanced-routing/create-ospfv3-routing-profiles\"\u003eNetwork \u0026gt; Network Profiles \u0026gt; OSPFv3 Auth\u003c/a\u003e (or view the profile attached to the OSPFv3 area/interface). Inspect the \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/ngfw/networking/ospf/configure-ospfv3\"\u003eSPI configuration\u003c/a\u003e to see if:\u0026nbsp;ESP Authentication is set to NONE.\u003c/p\u003e\u003c/li\u003e\u003c/ul\u003e\u003c/div\u003e\u003cb\u003e\u003c/b\u003e"
            }
          ],
          "value": "Customers are impacted if the following conditions are true:\n\n 1. SCTP is enabled or\n\n 2. DNS proxy object is configured and enabled on the firewall or\n\n 3. OSPFv3 routing on an IPv6 interface is enabled.\n\nTo check if SCTP is enabled: \n\n * Navigate to Device \u003e Setup \u003e Management (https://docs.paloaltonetworks.com/ngfw/help/10-2/device/device-setup-management) \u003e General Settings and check if SCTP Security (https://docs.paloaltonetworks.com/service-providers/10-2/mobile-network-infrastructure-getting-started/sctp/configure-sctp-security) is checked.\n   \n * Navigate to Policies \u003e Security (https://docs.paloaltonetworks.com/ngfw/help/10-2/policies/policies-security), inspect your active policy rules, and verify if an SCTP Protection profile (https://docs.paloaltonetworks.com/ngfw/help/10-1/objects/objects-security-profiles-sctp-protection) is applied under the rule\u0027s Actions tab to a rule allowing SCTP traffic.\n\nVerify DNS Proxy Status:\n\n * Navigate to Network \u003e DNS Proxy (https://docs.paloaltonetworks.com/ngfw/help/10-1/network/network-dns-proxy).\n   \n * Review all configured DNS Proxy objects.\n   \n * Click to open each DNS Proxy object and verify whether the Enable checkbox is selected.\n\nVerify OSPFv3 routing on IPv6\n\n * Navigate to Network \u003e Virtual Routers (https://docs.paloaltonetworks.com/ngfw/help/10-2/network/network-virtual-routers) (or Advanced Routing (https://docs.paloaltonetworks.com/ngfw/networking/advanced-routing)), open your active virtual router, and check under OSPFv3 (https://docs.paloaltonetworks.com/ngfw/networking/ospf/configure-ospfv3) to confirm if OSPFv3 routing is enabled on any IPv6 interface or subinterface.\n\n * Navigate to Network \u003e Network Profiles \u003e OSPFv3 Auth (https://docs.paloaltonetworks.com/ngfw/networking/advanced-routing/create-ospfv3-routing-profiles) (or view the profile attached to the OSPFv3 area/interface). Inspect the SPI configuration (https://docs.paloaltonetworks.com/ngfw/networking/ospf/configure-ospfv3) to see if: ESP Authentication is set to NONE."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:cloud_ngfw:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "all",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.2.4-h2",
                  "versionStartIncluding": "12.2.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.1.10-h4",
                  "versionStartIncluding": "12.1.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.2.16-h2",
                  "versionStartIncluding": "11.2.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.1.16-h5",
                  "versionStartIncluding": "11.1.16",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "OpenAI"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Rotem Bar (internal reporter)"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Ben Nott (internal reporter)"
        }
      ],
      "datePublic": "2026-11-11T17:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003c/p\u003e\u003cp\u003e\u003cspan\u003eA buffer overflow vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to disrupt service processing by causing a service process crash or memory corruption.\u003c/span\u003e\u003c/p\u003e\u003cp\u003e\u003cspan\u003ePanorama and Prisma\u00ae Access are not affected by this vulnerability.\u003c/span\u003e\u003c/p\u003e\u003cp\u003e\u003c/p\u003e"
            }
          ],
          "value": "A buffer overflow vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to disrupt service processing by causing a service process crash or memory corruption.\n\n\n\nPanorama and Prisma\u00ae Access are not affected by this vulnerability."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-100",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-100 Overflow Buffers"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 1.7,
            "baseSeverity": "LOW",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-11T19:50:29.708Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0326"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eCloud NGFW\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eCustomers who prefer to upgrade can work with Palo Alto Networks support to schedule an on-demand software upgrade.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 12.2\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.2.0 through 12.2.4-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.2.4-h2 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 12.1\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.1.0 through 12.1.10-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.1.10-h4 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 11.2\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.0 through 11.2.16-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.16-h2 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 11.1\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.0 through 11.1.16-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.16-h5 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eAll older\u003cbr\u003eunsupported\u003cbr\u003ePAN-OS versions\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eUpgrade to a supported fixed version.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePrisma Access\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION           MINOR VERSION               SUGGESTED SOLUTION\nCloud NGFW                                    Customers who prefer to upgrade can work with Palo Alto\n                                              Networks support to schedule an on-demand software upgrade.\nPAN-OS 12.2       12.2.0 through 12.2.4-h*    Upgrade to 12.2.4-h2 or later.\nPAN-OS 12.1       12.1.0 through 12.1.10-h*   Upgrade to 12.1.10-h4 or later.\nPAN-OS 11.2       11.2.0 through 11.2.16-h*   Upgrade to 11.2.16-h2 or later.\nPAN-OS 11.1       11.1.0 through 11.1.16-h*   Upgrade to 11.1.16-h5 or later.\nAll older                                     Upgrade to a supported fixed version.\nunsupported\nPAN-OS versions\nPrisma Access                                 No action needed."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-11-11T17:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "PAN-OS: Buffer Overflow Vulnerability in Protocol and Service Processing",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eCustomers can mitigate the risk of this issue by taking the following actions.\u003c/p\u003e\u003cp\u003eDetach the SCTP Protection profile from active Security Policy rules allowing SCTP traffic.\u003c/p\u003e\u003cp\u003eDisable configured DNS proxy objects:\u003c/p\u003e\u003cul\u003e\u003cli\u003e\u003cp\u003eNavigate to\u0026nbsp;\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/ngfw/help/10-1/network/network-dns-proxy\"\u003eNetwork \u0026gt; DNS Proxy\u003c/a\u003e.\u003c/p\u003e\u003c/li\u003e\u003c/ul\u003e\u003cul\u003e\u003cli\u003e\u003cp\u003eClick on each configured DNS Proxy object.\u003c/p\u003e\u003c/li\u003e\u003c/ul\u003e\u003cul\u003e\u003cli\u003e\u003cp\u003eUncheck the\u0026nbsp;\u003cb\u003eEnable\u003c/b\u003e\u0026nbsp;checkbox.\u003c/p\u003e\u003c/li\u003e\u003c/ul\u003e\u003cul\u003e\u003cli\u003e\u003cp\u003eClick\u0026nbsp;\u003cb\u003eOK\u003c/b\u003e\u0026nbsp;and \u003cb\u003eC\u003c/b\u003e\u003cb\u003eommit\u003c/b\u003e\u0026nbsp;the changes.\u003c/p\u003e\u003c/li\u003e\u003c/ul\u003e\u003cp\u003eUpdate any active OSPFv3 Auth Profiles under\u0026nbsp;\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/ngfw/networking/advanced-routing/create-ospfv3-routing-profiles\"\u003eNetwork \u0026gt; Network Profiles \u0026gt; OSPFv3 Auth\u003c/a\u003e\u0026nbsp; to use standard cryptographic authentication other than ESP-NULL.\u003cbr\u003e\u003c/p\u003e"
            }
          ],
          "value": "Customers can mitigate the risk of this issue by taking the following actions.\n\nDetach the SCTP Protection profile from active Security Policy rules allowing SCTP traffic.\n\nDisable configured DNS proxy objects:\n\n * Navigate to Network \u003e DNS Proxy (https://docs.paloaltonetworks.com/ngfw/help/10-1/network/network-dns-proxy).\n\n * Click on each configured DNS Proxy object.\n\n * Uncheck the Enable checkbox.\n\n * Click OK and Commit the changes.\n\nUpdate any active OSPFv3 Auth Profiles under Network \u003e Network Profiles \u003e OSPFv3 Auth (https://docs.paloaltonetworks.com/ngfw/networking/advanced-routing/create-ospfv3-routing-profiles)  to use standard cryptographic authentication other than ESP-NULL."
        }
      ],
      "x_affectedList": [
        "PAN-OS 12.2.4-h1",
        "PAN-OS 12.2.4",
        "PAN-OS 12.2.3",
        "PAN-OS 12.2.2",
        "PAN-OS 12.1.10-h3",
        "PAN-OS 12.1.10-h2",
        "PAN-OS 12.1.10",
        "PAN-OS 12.1.9",
        "PAN-OS 12.1.8",
        "PAN-OS 12.1.7-h12",
        "PAN-OS 12.1.7-h11",
        "PAN-OS 12.1.7-h9",
        "PAN-OS 12.1.7-h8",
        "PAN-OS 12.1.7-h6",
        "PAN-OS 12.1.7-h5",
        "PAN-OS 12.1.7-h3",
        "PAN-OS 12.1.7-h2",
        "PAN-OS 12.1.7-h1",
        "PAN-OS 12.1.7",
        "PAN-OS 12.1.6",
        "PAN-OS 12.1.5",
        "PAN-OS 12.1.4-h14",
        "PAN-OS 12.1.4-h13",
        "PAN-OS 12.1.4-h12",
        "PAN-OS 12.1.4-h11",
        "PAN-OS 12.1.4-h10",
        "PAN-OS 12.1.4-h9",
        "PAN-OS 12.1.4-h8",
        "PAN-OS 12.1.4-h7",
        "PAN-OS 12.1.4-h6",
        "PAN-OS 12.1.4-h5",
        "PAN-OS 12.1.4-h3",
        "PAN-OS 12.1.4-h2",
        "PAN-OS 12.1.4",
        "PAN-OS 12.1.3-h3",
        "PAN-OS 12.1.3-h1",
        "PAN-OS 12.1.3",
        "PAN-OS 12.1.2",
        "PAN-OS 11.2.16-h1",
        "PAN-OS 11.2.16",
        "PAN-OS 11.2.15",
        "PAN-OS 11.2.13-h4",
        "PAN-OS 11.2.13-h3",
        "PAN-OS 11.2.13-h2",
        "PAN-OS 11.2.13-h1",
        "PAN-OS 11.2.13",
        "PAN-OS 11.2.12",
        "PAN-OS 11.2.11",
        "PAN-OS 11.2.10-h17",
        "PAN-OS 11.2.10-h16",
        "PAN-OS 11.2.10-h15",
        "PAN-OS 11.2.10-h14",
        "PAN-OS 11.2.10-h13",
        "PAN-OS 11.2.10-h12",
        "PAN-OS 11.2.10-h10",
        "PAN-OS 11.2.10-h9",
        "PAN-OS 11.2.10-h8",
        "PAN-OS 11.2.10-h7",
        "PAN-OS 11.2.10-h6",
        "PAN-OS 11.2.10-h5",
        "PAN-OS 11.2.10-h4",
        "PAN-OS 11.2.10-h3",
        "PAN-OS 11.2.10-h2",
        "PAN-OS 11.2.10-h1",
        "PAN-OS 11.2.10",
        "PAN-OS 11.2.9",
        "PAN-OS 11.2.8",
        "PAN-OS 11.2.7-h23",
        "PAN-OS 11.2.7-h21",
        "PAN-OS 11.2.7-h20",
        "PAN-OS 11.2.7-h19",
        "PAN-OS 11.2.7-h18",
        "PAN-OS 11.2.7-h17",
        "PAN-OS 11.2.7-h16",
        "PAN-OS 11.2.7-h15",
        "PAN-OS 11.2.7-h14",
        "PAN-OS 11.2.7-h13",
        "PAN-OS 11.2.7-h12",
        "PAN-OS 11.2.7-h11",
        "PAN-OS 11.2.7-h10",
        "PAN-OS 11.2.7-h8",
        "PAN-OS 11.2.7-h7",
        "PAN-OS 11.2.7-h4",
        "PAN-OS 11.2.7-h3",
        "PAN-OS 11.2.7-h2",
        "PAN-OS 11.2.7-h1",
        "PAN-OS 11.2.7",
        "PAN-OS 11.2.6",
        "PAN-OS 11.2.5",
        "PAN-OS 11.2.4-h24",
        "PAN-OS 11.2.4-h23",
        "PAN-OS 11.2.4-h22",
        "PAN-OS 11.2.4-h21",
        "PAN-OS 11.2.4-h20",
        "PAN-OS 11.2.4-h18",
        "PAN-OS 11.2.4-h17",
        "PAN-OS 11.2.4-h15",
        "PAN-OS 11.2.4-h14",
        "PAN-OS 11.2.4-h12",
        "PAN-OS 11.2.4-h11",
        "PAN-OS 11.2.4-h10",
        "PAN-OS 11.2.4-h9",
        "PAN-OS 11.2.4-h8",
        "PAN-OS 11.2.4-h7",
        "PAN-OS 11.2.4-h6",
        "PAN-OS 11.2.4-h5",
        "PAN-OS 11.2.4-h4",
        "PAN-OS 11.2.4-h3",
        "PAN-OS 11.2.4-h2",
        "PAN-OS 11.2.4-h1",
        "PAN-OS 11.2.4",
        "PAN-OS 11.2.3-h5",
        "PAN-OS 11.2.3-h4",
        "PAN-OS 11.2.3-h3",
        "PAN-OS 11.2.3-h2",
        "PAN-OS 11.2.3-h1",
        "PAN-OS 11.2.3",
        "PAN-OS 11.2.2-h2",
        "PAN-OS 11.2.2-h1",
        "PAN-OS 11.2.1-h1",
        "PAN-OS 11.2.1",
        "PAN-OS 11.2.0-h1",
        "PAN-OS 11.2.0",
        "PAN-OS 11.1.16-h4",
        "PAN-OS 11.1.16-h3",
        "PAN-OS 11.1.16-h2",
        "PAN-OS 11.1.16-h1",
        "PAN-OS 11.1.16",
        "PAN-OS 11.1.15",
        "PAN-OS 11.1.14",
        "PAN-OS 11.1.13-h16",
        "PAN-OS 11.1.13-h15",
        "PAN-OS 11.1.13-h12",
        "PAN-OS 11.1.13-h11",
        "PAN-OS 11.1.13-h10",
        "PAN-OS 11.1.13-h9",
        "PAN-OS 11.1.13-h8",
        "PAN-OS 11.1.13-h7",
        "PAN-OS 11.1.13-h6",
        "PAN-OS 11.1.13-h5",
        "PAN-OS 11.1.13-h3",
        "PAN-OS 11.1.13-h2",
        "PAN-OS 11.1.13-h1",
        "PAN-OS 11.1.13",
        "PAN-OS 11.1.12",
        "PAN-OS 11.1.11",
        "PAN-OS 11.1.10-h36",
        "PAN-OS 11.1.10-h35",
        "PAN-OS 11.1.10-h33",
        "PAN-OS 11.1.10-h32",
        "PAN-OS 11.1.10-h30",
        "PAN-OS 11.1.10-h28",
        "PAN-OS 11.1.10-h27",
        "PAN-OS 11.1.10-h26",
        "PAN-OS 11.1.10-h25",
        "PAN-OS 11.1.10-h21",
        "PAN-OS 11.1.10-h12",
        "PAN-OS 11.1.10-h10",
        "PAN-OS 11.1.10-h9",
        "PAN-OS 11.1.10-h7",
        "PAN-OS 11.1.10-h5",
        "PAN-OS 11.1.10-h4",
        "PAN-OS 11.1.10-h1",
        "PAN-OS 11.1.10",
        "PAN-OS 11.1.9",
        "PAN-OS 11.1.8",
        "PAN-OS 11.1.6-h41",
        "PAN-OS 11.1.6-h40",
        "PAN-OS 11.1.6-h39",
        "PAN-OS 11.1.6-h38",
        "PAN-OS 11.1.6-h36",
        "PAN-OS 11.1.6-h35",
        "PAN-OS 11.1.6-h34",
        "PAN-OS 11.1.6-h33",
        "PAN-OS 11.1.6-h32",
        "PAN-OS 11.1.6-h29",
        "PAN-OS 11.1.6-h25",
        "PAN-OS 11.1.6-h23",
        "PAN-OS 11.1.6-h22",
        "PAN-OS 11.1.6-h21",
        "PAN-OS 11.1.6-h20",
        "PAN-OS 11.1.6-h19",
        "PAN-OS 11.1.6-h18",
        "PAN-OS 11.1.6-h17",
        "PAN-OS 11.1.6-h14",
        "PAN-OS 11.1.6-h10",
        "PAN-OS 11.1.6-h7",
        "PAN-OS 11.1.6-h6",
        "PAN-OS 11.1.6-h4",
        "PAN-OS 11.1.6-h3",
        "PAN-OS 11.1.6-h2",
        "PAN-OS 11.1.6-h1",
        "PAN-OS 11.1.6",
        "PAN-OS 11.1.5-h1",
        "PAN-OS 11.1.5",
        "PAN-OS 11.1.4-h39",
        "PAN-OS 11.1.4-h38",
        "PAN-OS 11.1.4-h37",
        "PAN-OS 11.1.4-h36",
        "PAN-OS 11.1.4-h35",
        "PAN-OS 11.1.4-h34",
        "PAN-OS 11.1.4-h33",
        "PAN-OS 11.1.4-h32",
        "PAN-OS 11.1.4-h27",
        "PAN-OS 11.1.4-h25",
        "PAN-OS 11.1.4-h18",
        "PAN-OS 11.1.4-h17",
        "PAN-OS 11.1.4-h15",
        "PAN-OS 11.1.4-h13",
        "PAN-OS 11.1.4-h12",
        "PAN-OS 11.1.4-h11",
        "PAN-OS 11.1.4-h10",
        "PAN-OS 11.1.4-h9",
        "PAN-OS 11.1.4-h8",
        "PAN-OS 11.1.4-h7",
        "PAN-OS 11.1.4-h6",
        "PAN-OS 11.1.4-h5",
        "PAN-OS 11.1.4-h4",
        "PAN-OS 11.1.4-h3",
        "PAN-OS 11.1.4-h2",
        "PAN-OS 11.1.4-h1",
        "PAN-OS 11.1.4",
        "PAN-OS 11.1.3-h13",
        "PAN-OS 11.1.3-h12",
        "PAN-OS 11.1.3-h11",
        "PAN-OS 11.1.3-h10",
        "PAN-OS 11.1.3-h9",
        "PAN-OS 11.1.3-h8",
        "PAN-OS 11.1.3-h7",
        "PAN-OS 11.1.3-h6",
        "PAN-OS 11.1.3-h5",
        "PAN-OS 11.1.3-h4",
        "PAN-OS 11.1.3-h3",
        "PAN-OS 11.1.3-h2",
        "PAN-OS 11.1.3-h1",
        "PAN-OS 11.1.3",
        "PAN-OS 11.1.2-h18",
        "PAN-OS 11.1.2-h17",
        "PAN-OS 11.1.2-h16",
        "PAN-OS 11.1.2-h15",
        "PAN-OS 11.1.2-h14",
        "PAN-OS 11.1.2-h13",
        "PAN-OS 11.1.2-h12",
        "PAN-OS 11.1.2-h11",
        "PAN-OS 11.1.2-h10",
        "PAN-OS 11.1.2-h9",
        "PAN-OS 11.1.2-h8",
        "PAN-OS 11.1.2-h7",
        "PAN-OS 11.1.2-h6",
        "PAN-OS 11.1.2-h5",
        "PAN-OS 11.1.2-h4",
        "PAN-OS 11.1.2-h3",
        "PAN-OS 11.1.2-h2",
        "PAN-OS 11.1.2-h1",
        "PAN-OS 11.1.2",
        "PAN-OS 11.1.1-h2",
        "PAN-OS 11.1.1-h1",
        "PAN-OS 11.1.1",
        "PAN-OS 11.1.0-h4",
        "PAN-OS 11.1.0-h3",
        "PAN-OS 11.1.0-h2",
        "PAN-OS 11.1.0-h1",
        "PAN-OS 11.1.0"
      ],
      "x_cpeGeneratedAt": "2026-11-11T19:48:58.606Z",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0326",
    "datePublished": "2026-11-11T19:50:29.708Z",
    "dateReserved": "2025-11-03T20:46:28.340Z",
    "dateUpdated": "2026-11-11T19:50:29.708Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2026-0326 (GCVE-0-2026-0326)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour