PAN-OS: Buffer Overflow Vulnerability in Protocol and Service Processing
Summary
| CVE | CVE-2026-0326 |
|---|---|
| State | PUBLISHED |
| Assigner | palo_alto |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-11-11 20:17:01 UTC |
| Updated | 2026-11-11 20:17:02 UTC |
| Description | A buffer overflow vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to disrupt service processing by causing a service process crash or memory corruption. Panorama and Prisma® Access are not affected by this vulnerability. |
Risk And Classification
Primary CVSS: v4.0 1.7 LOW from [email protected]
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber
Problem Types: CWE-787 | CWE-787 CWE-787 Out-of-bounds Write
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 4.0 | [email protected] | Secondary | 1.7 | LOW | CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/C... |
| 4.0 | CNA | CVSS | 1.7 | LOW | CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/A... |
CVSS v4.0 Breakdown
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Palo Alto Networks | Cloud NGFW | affected All custom | Not specified |
| CNA | Palo Alto Networks | PAN-OS | affected 12.2.0 12.2.4-h2 custom | Not specified |
| CNA | Palo Alto Networks | PAN-OS | affected 12.1.0 12.1.10-h4 custom | Not specified |
| CNA | Palo Alto Networks | PAN-OS | affected 11.2.0 11.2.16-h2 custom | Not specified |
| CNA | Palo Alto Networks | PAN-OS | affected 11.1.0 11.1.16-h5 custom | Not specified |
| CNA | Palo Alto Networks | Prisma Access | unaffected All custom | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| security.paloaltonetworks.com/CVE-2026-0326 | [email protected] | security.paloaltonetworks.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
CNA: OpenAI (en)
CNA: Rotem Bar (internal reporter) (en)
CNA: Ben Nott (internal reporter) (en)
Additional Advisory Data
| Source | Time | Event |
|---|---|---|
| CNA | 2026-11-11T17:00:00.000Z | Initial Publication |
Solutions
CNA: VERSION MINOR VERSION SUGGESTED SOLUTION Cloud NGFW Customers who prefer to upgrade can work with Palo Alto Networks support to schedule an on-demand software upgrade. PAN-OS 12.2 12.2.0 through 12.2.4-h* Upgrade to 12.2.4-h2 or later. PAN-OS 12.1 12.1.0 through 12.1.10-h* Upgrade to 12.1.10-h4 or later. PAN-OS 11.2 11.2.0 through 11.2.16-h* Upgrade to 11.2.16-h2 or later. PAN-OS 11.1 11.1.0 through 11.1.16-h* Upgrade to 11.1.16-h5 or later. All older Upgrade to a supported fixed version. unsupported PAN-OS versions Prisma Access No action needed.
Workarounds
CNA: Customers can mitigate the risk of this issue by taking the following actions. Detach the SCTP Protection profile from active Security Policy rules allowing SCTP traffic. Disable configured DNS proxy objects: * Navigate to Network > DNS Proxy (https://docs.paloaltonetworks.com/ngfw/help/10-1/network/network-dns-proxy). * Click on each configured DNS Proxy object. * Uncheck the Enable checkbox. * Click OK and Commit the changes. Update any active OSPFv3 Auth Profiles under Network > Network Profiles > OSPFv3 Auth (https://docs.paloaltonetworks.com/ngfw/networking/advanced-routing/create-ospfv3-routing-profiles) to use standard cryptographic authentication other than ESP-NULL.
Exploits
CNA: Palo Alto Networks is not aware of any malicious exploitation of this issue.