{"api_version":"1","generated_at":"2026-10-21T12:45:40+00:00","cve":"CVE-2026-0318","urls":{"html":"https://cve.report/CVE-2026-0318","api":"https://cve.report/api/cve/CVE-2026-0318.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-0318","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-0318"},"summary":{"title":"PAN-OS: Denial of Service (DoS) on Panorama","description":"A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software on Panorama enables an attacker to cause a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the Panorama entering maintenance mode.\n\nCloud NGFW, Prisma® Access, and standalone PAN-OS firewalls are not affected by this vulnerability.","state":"PUBLISHED","assigner":"palo_alto","published_at":"2026-10-14 21:17:19","updated_at":"2026-10-15 19:17:11"},"problem_types":["CWE-754","CWE-754 CWE-754 Improper Check for Unusual or Exceptional Conditions"],"metrics":[{"version":"4.0","source":"psirt@paloaltonetworks.com","type":"Secondary","score":"4.6","severity":"MEDIUM","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber","data":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"UNREPORTED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NO","Recovery":"USER","valueDensity":"DIFFUSE","vulnerabilityResponseEffort":"MODERATE","providerUrgency":"AMBER"}},{"version":"4.0","source":"CNA","type":"CVSS","score":"4.6","severity":"MEDIUM","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber","data":{"Automatable":"NO","Recovery":"USER","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","baseScore":4.6,"baseSeverity":"MEDIUM","exploitMaturity":"UNREPORTED","privilegesRequired":"NONE","providerUrgency":"AMBER","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"MODERATE"}}],"references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0318","name":"https://security.paloaltonetworks.com/CVE-2026-0318","refsource":"psirt@paloaltonetworks.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-0318","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0318","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Palo Alto Networks","product":"Cloud NGFW","version":"unaffected All custom","platforms":[]},{"source":"CNA","vendor":"Palo Alto Networks","product":"PAN-OS","version":"affected 12.2.0 12.2.4 custom","platforms":["Panorama"]},{"source":"CNA","vendor":"Palo Alto Networks","product":"PAN-OS","version":"affected 12.1.0 12.1.10-h2 custom","platforms":["Panorama"]},{"source":"CNA","vendor":"Palo Alto Networks","product":"PAN-OS","version":"affected 11.2.0 11.2.16 custom","platforms":["Panorama"]},{"source":"CNA","vendor":"Palo Alto Networks","product":"PAN-OS","version":"affected 11.1.0 11.1.16-h3 custom","platforms":["Panorama"]},{"source":"CNA","vendor":"Palo Alto Networks","product":"Prisma Access","version":"unaffected All 12.1.7-h8 custom","platforms":[]}],"timeline":[{"source":"CNA","time":"2026-10-14T16:00:00.000Z","lang":"en","value":"Initial Publication"}],"solutions":[{"source":"CNA","title":"","value":"VersionMinor VersionSuggested SolutionCloud NGFWNo action needed.PAN-OS 12.212.2.0 through 12.2.3Upgrade to 12.2.4 or later.PAN-OS 12.112.1.8 through 12.1.10-h*Upgrade to 12.1.10-h2 or later. 12.1.5 through 12.1.7-h*Upgrade to 12.1.7-h8 or 12.1.10-h2 or later. 12.1.2 through 12.1.4-h*Upgrade to 12.1.4-h12 or 12.1.10-h2 or later.PAN-OS 11.211.2.14 through 11.2.14-h*Upgrade to 11.2.15 or later.11.2.11 through 11.2.13-h*Upgrade to 11.2.13-h3 or 11.2.15 or later.11.2.8 through 11.2.10-h*Upgrade to 11.2.10-h15 or 11.2.15 or later.11.2.5 through 11.2.7-h*Upgrade to 11.2.7-h21 or 11.2.15 or later.11.2.0 through 11.2.4-h*Upgrade to 11.2.4-h22 or 11.2.15 or later.PAN-OS 11.111.1.14 through 11.1.16-h*\nUpgrade to 11.1.16-h3 or later. 11.1.11 through 11.1.13-h*Upgrade to 11.1.13-h15 or 11.1.16-h3 or later. 11.1.8 through 11.1.10-h*Upgrade to 11.1.10-h35 or 11.1.16-h3 or later.11.1.7 through 11.1.7-h*Upgrade to 11.1.7-h11 or 11.1.16-h3 or later.11.1.5 through 11.1.6-h*Upgrade to 11.1.6-h39 or 11.1.16-h3 or later.11.1.0 through 11.1.4-h*Upgrade to 11.1.4-h37 or 11.1.16-h3 or later.All older\nunsupported\nPAN-OS versionsUpgrade to a supported fixed version.Prisma Access No action needed.","time":"","lang":"eng"}],"workarounds":[{"source":"CNA","title":"","value":"The risk posed by this vulnerability can be reduced significantly by limiting access to Panorama to only known good IP addresses.","time":"","lang":"eng"}],"exploits":[{"source":"CNA","title":"","value":"Palo Alto Networks is not aware of any malicious exploitation of this issue.","time":"","lang":"en"}],"credits":[{"source":"CNA","value":"Ben Nott (internal reporter)","lang":"en"}],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2026-0318","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-10-15T18:48:12.298954Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2026-10-15T18:48:22.858Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"defaultStatus":"unaffected","product":"Cloud NGFW","vendor":"Palo Alto Networks","versions":[{"status":"unaffected","version":"All","versionType":"custom"}]},{"cpes":["cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h12:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h11:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h9:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h8:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h6:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h5:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h33:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h32:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h30:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h28:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h27:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h26:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h25:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h38:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h36:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h35:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h34:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h33:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h32:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h36:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h35:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h34:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h33:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:Panorama:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:Panorama:*"],"defaultStatus":"unaffected","platforms":["Panorama"],"product":"PAN-OS","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"12.2.4","status":"unaffected"}],"lessThan":"12.2.4","status":"affected","version":"12.2.0","versionType":"custom"},{"changes":[{"at":"12.1.4-h12","status":"unaffected"},{"at":"12.1.7-h8","status":"unaffected"},{"at":"12.1.10-h2","status":"unaffected"}],"lessThan":"12.1.10-h2","status":"affected","version":"12.1.0","versionType":"custom"},{"changes":[{"at":"11.2.4-h22","status":"unaffected"},{"at":"11.2.7-h21","status":"unaffected"},{"at":"11.2.10-h15","status":"unaffected"},{"at":"11.2.13-h3","status":"unaffected"},{"at":"11.2.15","status":"unaffected"}],"lessThan":"11.2.16","status":"affected","version":"11.2.0","versionType":"custom"},{"changes":[{"at":"11.1.4-h37","status":"unaffected"},{"at":"11.1.6-h39","status":"unaffected"},{"at":"11.1.7-h11","status":"unaffected"},{"at":"11.1.10-h35","status":"unaffected"},{"at":"11.1.13-h15","status":"unaffected"},{"at":"11.1.16-h3","status":"unaffected"}],"lessThan":"11.1.16-h3","status":"affected","version":"11.1.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Prisma Access","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"12.1.7-h8","status":"unaffected"}],"lessThan":"12.1.7-h8","status":"unaffected","version":"All","versionType":"custom"}]}],"configurations":[{"lang":"eng","supportingMedia":[{"base64":false,"type":"text/html","value":"<p><span>This issue applies only to Panorama in </span><a target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/panorama/getting-started/set-up-panorama/set-up-the-panorama-virtual-appliance/set-up-the-panorama-virtual-appliance-in-panorama-mode\"><span>panorama system</span></a><span>-mode (or </span><a target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/panorama/getting-started/set-up-panorama/set-up-the-panorama-virtual-appliance/set-up-the-panorama-virtual-appliance-in-management-only-mode\"><span>management-only </span></a><span>with Log Collector) with a </span><a target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/panorama/getting-started/set-up-panorama/set-up-the-panorama-virtual-appliance/set-up-the-panorama-virtual-appliance-as-a-log-collector\"><span>Collector Group configured</span></a><span>. Standalone PAN-OS firewalls are not affected.</span></p>"}],"value":"This issue applies only to Panorama in  panorama system https://docs.paloaltonetworks.com/panorama/getting-started/set-up-panorama/set-up-the-panorama-virtual-appliance/set-up-the-panorama-virtual-appliance-in-panorama-mode -mode (or  management-only  https://docs.paloaltonetworks.com/panorama/getting-started/set-up-panorama/set-up-the-panorama-virtual-appliance/set-up-the-panorama-virtual-appliance-in-management-only-mode with Log Collector) with a  Collector Group configured https://docs.paloaltonetworks.com/panorama/getting-started/set-up-panorama/set-up-the-panorama-virtual-appliance/set-up-the-panorama-virtual-appliance-as-a-log-collector . Standalone PAN-OS firewalls are not affected."}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*","versionEndExcluding":"12.2.4","versionStartIncluding":"12.2.0","vulnerable":true},{"criteria":"cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*","versionEndExcluding":"12.1.4-h12","versionStartIncluding":"12.1.4","vulnerable":true},{"criteria":"cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*","versionEndExcluding":"12.1.7-h8","versionStartIncluding":"12.1.7","vulnerable":true},{"criteria":"cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*","versionEndExcluding":"12.1.10-h2","versionStartIncluding":"12.1.10","vulnerable":true},{"criteria":"cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*","versionEndExcluding":"11.2.4-h22","versionStartIncluding":"11.2.4","vulnerable":true},{"criteria":"cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*","versionEndExcluding":"11.2.7-h21","versionStartIncluding":"11.2.7","vulnerable":true},{"criteria":"cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*","versionEndExcluding":"11.2.10-h15","versionStartIncluding":"11.2.10","vulnerable":true},{"criteria":"cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*","versionEndExcluding":"11.2.13-h3","versionStartIncluding":"11.2.13","vulnerable":true},{"criteria":"cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*","versionEndExcluding":"11.2.15","versionStartIncluding":"11.2.0","vulnerable":true},{"criteria":"cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*","versionEndExcluding":"11.1.4-h37","versionStartIncluding":"11.1.4","vulnerable":true},{"criteria":"cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*","versionEndExcluding":"11.1.6-h39","versionStartIncluding":"11.1.6","vulnerable":true},{"criteria":"cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*","versionEndExcluding":"11.1.7-h11","versionStartIncluding":"11.1.7","vulnerable":true},{"criteria":"cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*","versionEndExcluding":"11.1.10-h35","versionStartIncluding":"11.1.10","vulnerable":true},{"criteria":"cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*","versionEndExcluding":"11.1.13-h15","versionStartIncluding":"11.1.13","vulnerable":true},{"criteria":"cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*","versionEndExcluding":"11.1.16-h3","versionStartIncluding":"11.1.16","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"credits":[{"lang":"en","type":"finder","value":"Ben Nott (internal reporter)"}],"datePublic":"2026-10-14T16:00:00.000Z","descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software on Panorama enables an attacker to cause a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the Panorama entering maintenance mode.<br><br>Cloud NGFW, Prisma® Access, and standalone PAN-OS firewalls are not affected by this vulnerability."}],"value":"A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software on Panorama enables an attacker to cause a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the Panorama entering maintenance mode.\n\nCloud NGFW, Prisma® Access, and standalone PAN-OS firewalls are not affected by this vulnerability."}],"exploits":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Palo Alto Networks is not aware of any malicious exploitation of this issue."}],"value":"Palo Alto Networks is not aware of any malicious exploitation of this issue."}],"impacts":[{"capecId":"CAPEC-153","descriptions":[{"lang":"en","value":"CAPEC-153 Input Data Manipulation"}]}],"metrics":[{"cvssV4_0":{"Automatable":"NO","Recovery":"USER","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","baseScore":4.6,"baseSeverity":"MEDIUM","exploitMaturity":"UNREPORTED","privilegesRequired":"NONE","providerUrgency":"AMBER","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"MODERATE"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-754","description":"CWE-754 Improper Check for Unusual or Exceptional Conditions","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-10-14T20:19:28.773Z","orgId":"d6c1279f-00f6-4ef7-9217-f89ffe703ec0","shortName":"palo_alto"},"references":[{"name":"PAN-OS Security Advisory","tags":["vendor-advisory"],"url":"https://security.paloaltonetworks.com/CVE-2026-0318"}],"solutions":[{"lang":"eng","supportingMedia":[{"base64":false,"type":"text/html","value":"<table><thead><tr><th>Version</th><th>Minor Version</th><th>Suggested Solution</th></tr></thead><tbody><tr><td>Cloud NGFW</td><td></td><td>No action needed.</td></tr><tr><td>PAN-OS 12.2</td><td>12.2.0 through 12.2.3</td><td>Upgrade to 12.2.4 or later.</td></tr><tr><td>PAN-OS 12.1</td><td>12.1.8 through 12.1.10-h*</td><td>Upgrade to 12.1.10-h2 or later.&nbsp;</td></tr><tr><td></td><td>12.1.5 through 12.1.7-h*</td><td>Upgrade to 12.1.7-h8 or 12.1.10-h2 or later.&nbsp;</td></tr><tr><td></td><td>12.1.2 through 12.1.4-h*</td><td>Upgrade to 12.1.4-h12 or 12.1.10-h2 or later.</td></tr><tr><td>PAN-OS 11.2</td><td>11.2.14 through 11.2.14-h*</td><td>Upgrade to 11.2.15 or later.</td></tr><tr><td></td><td>11.2.11 through 11.2.13-h*</td><td>Upgrade to 11.2.13-h3 or 11.2.15 or later.</td></tr><tr><td></td><td>11.2.8 through 11.2.10-h*</td><td>Upgrade to 11.2.10-h15 or 11.2.15 or later.</td></tr><tr><td></td><td>11.2.5 through 11.2.7-h*</td><td>Upgrade to 11.2.7-h21 or 11.2.15 or later.</td></tr><tr><td></td><td>11.2.0 through 11.2.4-h*</td><td>Upgrade to 11.2.4-h22 or 11.2.15 or later.</td></tr><tr><td>PAN-OS 11.1</td><td>11.1.14 through 11.1.16-h*<br></td><td>Upgrade to 11.1.16-h3 or later.</td></tr><tr><td>&nbsp;</td><td>11.1.11 through 11.1.13-h*</td><td>Upgrade to 11.1.13-h15 or 11.1.16-h3 or later.&nbsp;</td></tr><tr><td></td><td>11.1.8 through 11.1.10-h*</td><td>Upgrade to 11.1.10-h35 or 11.1.16-h3 or later.</td></tr><tr><td></td><td>11.1.7 through 11.1.7-h*</td><td>Upgrade to 11.1.7-h11 or 11.1.16-h3 or later.</td></tr><tr><td></td><td>11.1.5 through 11.1.6-h*</td><td>Upgrade to 11.1.6-h39 or 11.1.16-h3 or later.</td></tr><tr><td></td><td>11.1.0 through 11.1.4-h*</td><td>Upgrade to 11.1.4-h37 or 11.1.16-h3 or later.</td></tr><tr><td>All older<br>unsupported<br>PAN-OS versions</td><td></td><td>Upgrade to a supported fixed version.</td></tr><tr><td>Prisma Access</td><td>&nbsp;</td><td>No action needed.</td></tr></tbody></table>"}],"value":"VersionMinor VersionSuggested SolutionCloud NGFWNo action needed.PAN-OS 12.212.2.0 through 12.2.3Upgrade to 12.2.4 or later.PAN-OS 12.112.1.8 through 12.1.10-h*Upgrade to 12.1.10-h2 or later. 12.1.5 through 12.1.7-h*Upgrade to 12.1.7-h8 or 12.1.10-h2 or later. 12.1.2 through 12.1.4-h*Upgrade to 12.1.4-h12 or 12.1.10-h2 or later.PAN-OS 11.211.2.14 through 11.2.14-h*Upgrade to 11.2.15 or later.11.2.11 through 11.2.13-h*Upgrade to 11.2.13-h3 or 11.2.15 or later.11.2.8 through 11.2.10-h*Upgrade to 11.2.10-h15 or 11.2.15 or later.11.2.5 through 11.2.7-h*Upgrade to 11.2.7-h21 or 11.2.15 or later.11.2.0 through 11.2.4-h*Upgrade to 11.2.4-h22 or 11.2.15 or later.PAN-OS 11.111.1.14 through 11.1.16-h*\nUpgrade to 11.1.16-h3 or later. 11.1.11 through 11.1.13-h*Upgrade to 11.1.13-h15 or 11.1.16-h3 or later. 11.1.8 through 11.1.10-h*Upgrade to 11.1.10-h35 or 11.1.16-h3 or later.11.1.7 through 11.1.7-h*Upgrade to 11.1.7-h11 or 11.1.16-h3 or later.11.1.5 through 11.1.6-h*Upgrade to 11.1.6-h39 or 11.1.16-h3 or later.11.1.0 through 11.1.4-h*Upgrade to 11.1.4-h37 or 11.1.16-h3 or later.All older\nunsupported\nPAN-OS versionsUpgrade to a supported fixed version.Prisma Access No action needed."}],"source":{"discovery":"INTERNAL"},"timeline":[{"lang":"en","time":"2026-10-14T16:00:00.000Z","value":"Initial Publication"}],"title":"PAN-OS: Denial of Service (DoS) on Panorama","workarounds":[{"lang":"eng","supportingMedia":[{"base64":false,"type":"text/html","value":"The risk posed by this vulnerability can be reduced significantly by limiting access to Panorama to only known good IP addresses."}],"value":"The risk posed by this vulnerability can be reduced significantly by limiting access to Panorama to only known good IP addresses."}],"x_affectedList":["PAN-OS 12.2.3","PAN-OS 12.2.2","PAN-OS 12.1.10","PAN-OS 12.1.9","PAN-OS 12.1.8","PAN-OS 12.1.7-h6","PAN-OS 12.1.7-h5","PAN-OS 12.1.7-h3","PAN-OS 12.1.7-h2","PAN-OS 12.1.7-h1","PAN-OS 12.1.7","PAN-OS 12.1.6","PAN-OS 12.1.5","PAN-OS 12.1.4-h11","PAN-OS 12.1.4-h10","PAN-OS 12.1.4-h9","PAN-OS 12.1.4-h8","PAN-OS 12.1.4-h7","PAN-OS 12.1.4-h6","PAN-OS 12.1.4-h5","PAN-OS 12.1.4-h3","PAN-OS 12.1.4-h2","PAN-OS 12.1.4","PAN-OS 12.1.3-h3","PAN-OS 12.1.3-h1","PAN-OS 12.1.3","PAN-OS 12.1.2","PAN-OS 11.2.13-h2","PAN-OS 11.2.13-h1","PAN-OS 11.2.13","PAN-OS 11.2.12","PAN-OS 11.2.11","PAN-OS 11.2.10-h14","PAN-OS 11.2.10-h13","PAN-OS 11.2.10-h12","PAN-OS 11.2.10-h10","PAN-OS 11.2.10-h9","PAN-OS 11.2.10-h8","PAN-OS 11.2.10-h7","PAN-OS 11.2.10-h6","PAN-OS 11.2.10-h5","PAN-OS 11.2.10-h4","PAN-OS 11.2.10-h3","PAN-OS 11.2.10-h2","PAN-OS 11.2.10-h1","PAN-OS 11.2.10","PAN-OS 11.2.9","PAN-OS 11.2.8","PAN-OS 11.2.7-h20","PAN-OS 11.2.7-h19","PAN-OS 11.2.7-h18","PAN-OS 11.2.7-h17","PAN-OS 11.2.7-h16","PAN-OS 11.2.7-h15","PAN-OS 11.2.7-h14","PAN-OS 11.2.7-h13","PAN-OS 11.2.7-h12","PAN-OS 11.2.7-h11","PAN-OS 11.2.7-h10","PAN-OS 11.2.7-h8","PAN-OS 11.2.7-h7","PAN-OS 11.2.7-h4","PAN-OS 11.2.7-h3","PAN-OS 11.2.7-h2","PAN-OS 11.2.7-h1","PAN-OS 11.2.7","PAN-OS 11.2.6","PAN-OS 11.2.5","PAN-OS 11.2.4-h21","PAN-OS 11.2.4-h20","PAN-OS 11.2.4-h18","PAN-OS 11.2.4-h17","PAN-OS 11.2.4-h15","PAN-OS 11.2.4-h14","PAN-OS 11.2.4-h12","PAN-OS 11.2.4-h11","PAN-OS 11.2.4-h10","PAN-OS 11.2.4-h9","PAN-OS 11.2.4-h8","PAN-OS 11.2.4-h7","PAN-OS 11.2.4-h6","PAN-OS 11.2.4-h5","PAN-OS 11.2.4-h4","PAN-OS 11.2.4-h3","PAN-OS 11.2.4-h2","PAN-OS 11.2.4-h1","PAN-OS 11.2.4","PAN-OS 11.2.3-h5","PAN-OS 11.2.3-h4","PAN-OS 11.2.3-h3","PAN-OS 11.2.3-h2","PAN-OS 11.2.3-h1","PAN-OS 11.2.3","PAN-OS 11.2.2-h2","PAN-OS 11.2.2-h1","PAN-OS 11.2.1-h1","PAN-OS 11.2.1","PAN-OS 11.2.0-h1","PAN-OS 11.2.0","PAN-OS 11.1.16-h2","PAN-OS 11.1.16-h1","PAN-OS 11.1.16","PAN-OS 11.1.15","PAN-OS 11.1.14","PAN-OS 11.1.13-h12","PAN-OS 11.1.13-h11","PAN-OS 11.1.13-h10","PAN-OS 11.1.13-h9","PAN-OS 11.1.13-h8","PAN-OS 11.1.13-h7","PAN-OS 11.1.13-h6","PAN-OS 11.1.13-h5","PAN-OS 11.1.13-h3","PAN-OS 11.1.13-h2","PAN-OS 11.1.13-h1","PAN-OS 11.1.13","PAN-OS 11.1.12","PAN-OS 11.1.11","PAN-OS 11.1.10-h33","PAN-OS 11.1.10-h32","PAN-OS 11.1.10-h30","PAN-OS 11.1.10-h28","PAN-OS 11.1.10-h27","PAN-OS 11.1.10-h26","PAN-OS 11.1.10-h25","PAN-OS 11.1.10-h21","PAN-OS 11.1.10-h12","PAN-OS 11.1.10-h10","PAN-OS 11.1.10-h9","PAN-OS 11.1.10-h7","PAN-OS 11.1.10-h5","PAN-OS 11.1.10-h4","PAN-OS 11.1.10-h1","PAN-OS 11.1.10","PAN-OS 11.1.9","PAN-OS 11.1.8","PAN-OS 11.1.6-h38","PAN-OS 11.1.6-h36","PAN-OS 11.1.6-h35","PAN-OS 11.1.6-h34","PAN-OS 11.1.6-h33","PAN-OS 11.1.6-h32","PAN-OS 11.1.6-h29","PAN-OS 11.1.6-h25","PAN-OS 11.1.6-h23","PAN-OS 11.1.6-h22","PAN-OS 11.1.6-h21","PAN-OS 11.1.6-h20","PAN-OS 11.1.6-h19","PAN-OS 11.1.6-h18","PAN-OS 11.1.6-h17","PAN-OS 11.1.6-h14","PAN-OS 11.1.6-h10","PAN-OS 11.1.6-h7","PAN-OS 11.1.6-h6","PAN-OS 11.1.6-h4","PAN-OS 11.1.6-h3","PAN-OS 11.1.6-h2","PAN-OS 11.1.6-h1","PAN-OS 11.1.6","PAN-OS 11.1.5-h1","PAN-OS 11.1.5","PAN-OS 11.1.4-h36","PAN-OS 11.1.4-h35","PAN-OS 11.1.4-h34","PAN-OS 11.1.4-h33","PAN-OS 11.1.4-h32","PAN-OS 11.1.4-h27","PAN-OS 11.1.4-h25","PAN-OS 11.1.4-h18","PAN-OS 11.1.4-h17","PAN-OS 11.1.4-h15","PAN-OS 11.1.4-h13","PAN-OS 11.1.4-h12","PAN-OS 11.1.4-h11","PAN-OS 11.1.4-h10","PAN-OS 11.1.4-h9","PAN-OS 11.1.4-h8","PAN-OS 11.1.4-h7","PAN-OS 11.1.4-h6","PAN-OS 11.1.4-h5","PAN-OS 11.1.4-h4","PAN-OS 11.1.4-h3","PAN-OS 11.1.4-h2","PAN-OS 11.1.4-h1","PAN-OS 11.1.4","PAN-OS 11.1.3-h13","PAN-OS 11.1.3-h12","PAN-OS 11.1.3-h11","PAN-OS 11.1.3-h10","PAN-OS 11.1.3-h9","PAN-OS 11.1.3-h8","PAN-OS 11.1.3-h7","PAN-OS 11.1.3-h6","PAN-OS 11.1.3-h5","PAN-OS 11.1.3-h4","PAN-OS 11.1.3-h3","PAN-OS 11.1.3-h2","PAN-OS 11.1.3-h1","PAN-OS 11.1.3","PAN-OS 11.1.2-h18","PAN-OS 11.1.2-h17","PAN-OS 11.1.2-h16","PAN-OS 11.1.2-h15","PAN-OS 11.1.2-h14","PAN-OS 11.1.2-h13","PAN-OS 11.1.2-h12","PAN-OS 11.1.2-h11","PAN-OS 11.1.2-h10","PAN-OS 11.1.2-h9","PAN-OS 11.1.2-h8","PAN-OS 11.1.2-h7","PAN-OS 11.1.2-h6","PAN-OS 11.1.2-h5","PAN-OS 11.1.2-h4","PAN-OS 11.1.2-h3","PAN-OS 11.1.2-h2","PAN-OS 11.1.2-h1","PAN-OS 11.1.2","PAN-OS 11.1.1-h2","PAN-OS 11.1.1-h1","PAN-OS 11.1.1","PAN-OS 11.1.0-h4","PAN-OS 11.1.0-h3","PAN-OS 11.1.0-h2","PAN-OS 11.1.0-h1","PAN-OS 11.1.0"],"x_generator":{"engine":"Vulnogram 0.1.0-dev"}}},"cveMetadata":{"assignerOrgId":"d6c1279f-00f6-4ef7-9217-f89ffe703ec0","assignerShortName":"palo_alto","cveId":"CVE-2026-0318","datePublished":"2026-10-14T20:19:28.773Z","dateReserved":"2025-11-03T20:45:16.597Z","dateUpdated":"2026-10-15T18:48:22.858Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-10-14 21:17:19","lastModifiedDate":"2026-10-15 19:17:11","problem_types":["CWE-754","CWE-754 CWE-754 Improper Check for Unusual or Exceptional Conditions"],"metrics":{"cvssMetricV40":[{"source":"psirt@paloaltonetworks.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"UNREPORTED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NO","Recovery":"USER","valueDensity":"DIFFUSE","vulnerabilityResponseEffort":"MODERATE","providerUrgency":"AMBER"}}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-15T18:48:12.298954Z","id":"CVE-2026-0318","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"318","Ordinal":"1","Title":"PAN-OS: Denial of Service (DoS) on Panorama","CVE":"CVE-2026-0318","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"318","Ordinal":"1","NoteData":"A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software on Panorama enables an attacker to cause a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the Panorama entering maintenance mode.\n\nCloud NGFW, Prisma® Access, and standalone PAN-OS firewalls are not affected by this vulnerability.","Type":"Description","Title":"PAN-OS: Denial of Service (DoS) on Panorama"}]}}}