Vulnerability · Published Sep 10, 2026 · Assigned by palo_alto
CVE-2026-0310PAN-OS: Buffer Overflow Vulnerability via XML Processing
High 7.2
In plain English
A high-severity out-of-bounds write in Cloud NGFW from Palo Alto Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 52% of all known vulnerabilities).
Official description
A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web or dataplane interface to cause a denial of service (DoS) condition on VM-Series firewalls or execute arbitrary code with root privileges on the PA-Series firewalls. The security risk posed by this issue is minimized when the management interface is restricted to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . Panorama is impacted by this vulnerability.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Palo Alto Networks | Cloud NGFW | All |
| Palo Alto Networks | PAN-OS | 12.2.0 – before 12.2.312.1.0 – before 12.1.4-h1011.2.0 – before 11.2.4-h2111.1.0 – before 11.1.4-h3610.2.0 – before 10.2.7-h37 |
| Palo Alto Networks | Prisma Access | 11.2.0 – before 11.2.4-h2110.2.0 – before 10.2.7-h37 |
Weakness: CWE-787 · Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Red