{"affected":[{"defaultStatus":"unaffected","product":"Cloud NGFW","source":"CNA: palo_alto","vendor":"Palo Alto Networks","versions":[{"status":"affected","version":"All","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"PAN-OS","source":"CNA: palo_alto","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"12.2.4-h2","status":"unaffected"}],"lessThan":"12.2.4-h2","status":"affected","version":"12.2.0","versionType":"custom"},{"changes":[{"at":"12.1.10-h4","status":"unaffected"}],"lessThan":"12.1.10-h4","status":"affected","version":"12.1.0","versionType":"custom"},{"changes":[{"at":"11.2.16-h2","status":"unaffected"}],"lessThan":"11.2.16-h2","status":"affected","version":"11.2.0","versionType":"custom"},{"changes":[{"at":"11.1.16-h5","status":"unaffected"}],"lessThan":"11.1.16-h5","status":"affected","version":"11.1.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Prisma Access","source":"CNA: palo_alto","vendor":"Palo Alto Networks","versions":[{"status":"unaffected","version":"All","versionType":"custom"}]}],"cveId":"CVE-2026-0326","cwes":["CWE-787"],"description":"A buffer overflow vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to disrupt service processing by causing a service process crash or memory corruption.\n\n\n\nPanorama and Prisma® Access are not affected by this vulnerability.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":1.7,"severity":"low","source":"CNA: palo_alto","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber","version":"4.0"}],"modifiedAt":1794426629708,"publishedAt":1794426629708,"references":[{"source":"CNA: palo_alto","tags":["vendor-advisory"],"url":"https://security.paloaltonetworks.com/CVE-2026-0326"}],"remediation":[{"kind":"fix","source":"CNA: palo_alto","text":"VERSION           MINOR VERSION               SUGGESTED SOLUTION\nCloud NGFW                                    Customers who prefer to upgrade can work with Palo Alto\n                                              Networks support to schedule an on-demand software upgrade.\nPAN-OS 12.2       12.2.0 through 12.2.4-h*    Upgrade to 12.2.4-h2 or later.\nPAN-OS 12.1       12.1.0 through 12.1.10-h*   Upgrade to 12.1.10-h4 or later.\nPAN-OS 11.2       11.2.0 through 11.2.16-h*   Upgrade to 11.2.16-h2 or later.\nPAN-OS 11.1       11.1.0 through 11.1.16-h*   Upgrade to 11.1.16-h5 or later.\nAll older                                     Upgrade to a supported fixed version.\nunsupported\nPAN-OS versions\nPrisma Access                                 No action needed."},{"kind":"workaround","source":"CNA: palo_alto","text":"Customers can mitigate the risk of this issue by taking the following actions.\n\nDetach the SCTP Protection profile from active Security Policy rules allowing SCTP traffic.\n\nDisable configured DNS proxy objects:\n\n * Navigate to Network > DNS Proxy (https://docs.paloaltonetworks.com/ngfw/help/10-1/network/network-dns-proxy).\n\n * Click on each configured DNS Proxy object.\n\n * Uncheck the Enable checkbox.\n\n * Click OK and Commit the changes.\n\nUpdate any active OSPFv3 Auth Profiles under Network > Network Profiles > OSPFv3 Auth (https://docs.paloaltonetworks.com/ngfw/networking/advanced-routing/create-ospfv3-routing-profiles)  to use standard cryptographic authentication other than ESP-NULL."}],"revision":"233df48115c1499852f99c49733bbdc39e97fcb607a93a34a062b867501a6385","sources":[{"modifiedAt":1794426629708,"name":"CNA: palo_alto","retrievedAt":1794427706353,"url":"https://www.cve.org/CVERecord?id=CVE-2026-0326"}],"ssvc":null,"status":"published","title":"PAN-OS: Buffer Overflow Vulnerability in Protocol and Service Processing","updatedAt":1794427706353}