CVE-2026-0263
EUVD-2026-3006413.05.2026, 18:16
A buffer overflow vulnerability in the IKEv2 processing of Palo Alto Networks PAN-OS® software allows an unauthenticated network-based attacker to execute arbitrary code with elevated privileges on the firewall, or cause a denial of service (DoS) condition. Panorama, Cloud NGFW, and Prisma® Access are not impacted by these vulnerabilities.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| paloaltonetworks | pan-os | 11.1.0 ≤ 𝑥 < 11.1.4 |
| paloaltonetworks | pan-os | 11.1.5 ≤ 𝑥 < 11.1.6 |
| paloaltonetworks | pan-os | 11.1.8 ≤ 𝑥 < 11.1.10 |
| paloaltonetworks | pan-os | 11.1.11 ≤ 𝑥 < 11.1.13 |
| paloaltonetworks | pan-os | 11.1.4 |
| paloaltonetworks | pan-os | 11.1.4:h1 |
| paloaltonetworks | pan-os | 11.1.4:h10 |
| paloaltonetworks | pan-os | 11.1.4:h11 |
| paloaltonetworks | pan-os | 11.1.4:h12 |
| paloaltonetworks | pan-os | 11.1.4:h13 |
| paloaltonetworks | pan-os | 11.1.4:h15 |
| paloaltonetworks | pan-os | 11.1.4:h16 |
| paloaltonetworks | pan-os | 11.1.4:h17 |
| paloaltonetworks | pan-os | 11.1.4:h18 |
| paloaltonetworks | pan-os | 11.1.4:h2 |
| paloaltonetworks | pan-os | 11.1.4:h25 |
| paloaltonetworks | pan-os | 11.1.4:h27 |
| paloaltonetworks | pan-os | 11.1.4:h3 |
| paloaltonetworks | pan-os | 11.1.4:h32 |
| paloaltonetworks | pan-os | 11.1.4:h4 |
| paloaltonetworks | pan-os | 11.1.4:h5 |
| paloaltonetworks | pan-os | 11.1.4:h6 |
| paloaltonetworks | pan-os | 11.1.4:h7 |
| paloaltonetworks | pan-os | 11.1.4:h8 |
| paloaltonetworks | pan-os | 11.1.4:h9 |
| paloaltonetworks | pan-os | 11.1.6 |
| paloaltonetworks | pan-os | 11.1.6:h1 |
| paloaltonetworks | pan-os | 11.1.6:h10 |
| paloaltonetworks | pan-os | 11.1.6:h14 |
| paloaltonetworks | pan-os | 11.1.6:h17 |
| paloaltonetworks | pan-os | 11.1.6:h18 |
| paloaltonetworks | pan-os | 11.1.6:h19 |
| paloaltonetworks | pan-os | 11.1.6:h2 |
| paloaltonetworks | pan-os | 11.1.6:h20 |
| paloaltonetworks | pan-os | 11.1.6:h21 |
| paloaltonetworks | pan-os | 11.1.6:h22 |
| paloaltonetworks | pan-os | 11.1.6:h23 |
| paloaltonetworks | pan-os | 11.1.6:h25 |
| paloaltonetworks | pan-os | 11.1.6:h29 |
| paloaltonetworks | pan-os | 11.1.6:h3 |
| paloaltonetworks | pan-os | 11.1.6:h4 |
| paloaltonetworks | pan-os | 11.1.6:h5 |
| paloaltonetworks | pan-os | 11.1.6:h6 |
| paloaltonetworks | pan-os | 11.1.6:h7 |
| paloaltonetworks | pan-os | 11.1.7 |
| paloaltonetworks | pan-os | 11.1.7:h1 |
| paloaltonetworks | pan-os | 11.1.7:h2 |
| paloaltonetworks | pan-os | 11.1.7:h4 |
| paloaltonetworks | pan-os | 11.1.10 |
| paloaltonetworks | pan-os | 11.1.10:h1 |
| paloaltonetworks | pan-os | 11.1.10:h10 |
| paloaltonetworks | pan-os | 11.1.10:h12 |
| paloaltonetworks | pan-os | 11.1.10:h21 |
| paloaltonetworks | pan-os | 11.1.10:h4 |
| paloaltonetworks | pan-os | 11.1.10:h5 |
| paloaltonetworks | pan-os | 11.1.10:h7 |
| paloaltonetworks | pan-os | 11.1.10:h9 |
| paloaltonetworks | pan-os | 11.1.13 |
| paloaltonetworks | pan-os | 11.1.13:h1 |
| paloaltonetworks | pan-os | 11.1.13:h2 |
| paloaltonetworks | pan-os | 11.1.13:h3 |
| paloaltonetworks | pan-os | 11.1.14 |
| paloaltonetworks | pan-os | 11.2.0 ≤ 𝑥 < 11.2.4 |
| paloaltonetworks | pan-os | 11.2.5 ≤ 𝑥 < 11.2.7 |
| paloaltonetworks | pan-os | 11.2.8 ≤ 𝑥 < 11.2.10 |
| paloaltonetworks | pan-os | 11.2.4 |
| paloaltonetworks | pan-os | 11.2.4:h1 |
| paloaltonetworks | pan-os | 11.2.4:h10 |
| paloaltonetworks | pan-os | 11.2.4:h11 |
| paloaltonetworks | pan-os | 11.2.4:h12 |
| paloaltonetworks | pan-os | 11.2.4:h14 |
| paloaltonetworks | pan-os | 11.2.4:h15 |
| paloaltonetworks | pan-os | 11.2.4:h2 |
| paloaltonetworks | pan-os | 11.2.4:h3 |
| paloaltonetworks | pan-os | 11.2.4:h4 |
| paloaltonetworks | pan-os | 11.2.4:h5 |
| paloaltonetworks | pan-os | 11.2.4:h6 |
| paloaltonetworks | pan-os | 11.2.4:h7 |
| paloaltonetworks | pan-os | 11.2.4:h8 |
| paloaltonetworks | pan-os | 11.2.4:h9 |
| paloaltonetworks | pan-os | 11.2.7 |
| paloaltonetworks | pan-os | 11.2.7:h1 |
| paloaltonetworks | pan-os | 11.2.7:h10 |
| paloaltonetworks | pan-os | 11.2.7:h11 |
| paloaltonetworks | pan-os | 11.2.7:h12 |
| paloaltonetworks | pan-os | 11.2.7:h2 |
| paloaltonetworks | pan-os | 11.2.7:h3 |
| paloaltonetworks | pan-os | 11.2.7:h4 |
| paloaltonetworks | pan-os | 11.2.7:h7 |
| paloaltonetworks | pan-os | 11.2.7:h8 |
| paloaltonetworks | pan-os | 11.2.10 |
| paloaltonetworks | pan-os | 11.2.10:h1 |
| paloaltonetworks | pan-os | 11.2.10:h2 |
| paloaltonetworks | pan-os | 11.2.10:h3 |
| paloaltonetworks | pan-os | 11.2.10:h4 |
| paloaltonetworks | pan-os | 11.2.10:h5 |
| paloaltonetworks | pan-os | 11.2.11 |
| paloaltonetworks | pan-os | 12.1.0 ≤ 𝑥 < 12.1.4 |
| paloaltonetworks | pan-os | 12.1.5 ≤ 𝑥 < 12.1.7 |
| paloaltonetworks | pan-os | 12.1.4 |
| paloaltonetworks | pan-os | 12.1.4:h2 |
| paloaltonetworks | pan-os | 12.1.4:h3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration