Customers are impacted if the following conditions are true:
SCTP is enabled or
DNS proxy object is configured and enabled on the firewall or
OSPFv3 routing on an IPv6 interface is enabled.
Navigate to Network > Network Profiles > OSPFv3 Auth (or view the profile attached to the OSPFv3 area/interface). Inspect the SPI configuration to see if: ESP Authentication is set to NONE.
A buffer overflow vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to disrupt service processing by causing a service process crash or memory corruption.
Panorama and Prisma® Access are not affected by this vulnerability.
"}],"value":"A buffer overflow vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to disrupt service processing by causing a service process crash or memory corruption.\n\n\n\nPanorama and Prisma® Access are not affected by this vulnerability."}],"exploits":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Palo Alto Networks is not aware of any malicious exploitation of this issue."}],"value":"Palo Alto Networks is not aware of any malicious exploitation of this issue."}],"impacts":[{"capecId":"CAPEC-100","descriptions":[{"lang":"en","value":"CAPEC-100 Overflow Buffers"}]}],"metrics":[{"cvssV4_0":{"Automatable":"NO","Recovery":"USER","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","baseScore":1.7,"baseSeverity":"LOW","exploitMaturity":"UNREPORTED","privilegesRequired":"NONE","providerUrgency":"AMBER","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"MODERATE"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-11-11T19:50:29.708Z","orgId":"d6c1279f-00f6-4ef7-9217-f89ffe703ec0","shortName":"palo_alto"},"references":[{"tags":["vendor-advisory"],"url":"https://security.paloaltonetworks.com/CVE-2026-0326"}],"solutions":[{"lang":"eng","supportingMedia":[{"base64":false,"type":"text/html","value":"| Version | Minor Version | Suggested Solution |
|---|---|---|
| Cloud NGFW | Customers who prefer to upgrade can work with Palo Alto Networks support to schedule an on-demand software upgrade. | |
| PAN-OS 12.2 | \n 12.2.0 through 12.2.4-h* | \nUpgrade to 12.2.4-h2 or later. | \n
| PAN-OS 12.1 | \n 12.1.0 through 12.1.10-h* | \nUpgrade to 12.1.10-h4 or later. | \n
| PAN-OS 11.2 | \n 11.2.0 through 11.2.16-h* | \nUpgrade to 11.2.16-h2 or later. | \n
| PAN-OS 11.1 | \n 11.1.0 through 11.1.16-h* | \nUpgrade to 11.1.16-h5 or later. | \n
| All older unsupported PAN-OS versions | Upgrade to a supported fixed version. | |
| Prisma Access | No action needed. |
Customers can mitigate the risk of this issue by taking the following actions.
Detach the SCTP Protection profile from active Security Policy rules allowing SCTP traffic.
Disable configured DNS proxy objects:
Navigate to Network > DNS Proxy.
Click on each configured DNS Proxy object.
Uncheck the Enable checkbox.
Click OK and Commit the changes.
Update any active OSPFv3 Auth Profiles under Network > Network Profiles > OSPFv3 Auth to use standard cryptographic authentication other than ESP-NULL.