CVE-2026-0263

A buffer overflow vulnerability in the IKEv2 processing of Palo Alto Networks PAN-OS® software allows an unauthenticated network-based attacker to execute arbitrary code with elevated privileges on the firewall, or cause a denial of service (DoS) condition. Panorama, Cloud NGFW, and Prisma® Access are not impacted by these vulnerabilities.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - psirt@paloaltonetworks.com

Published

2026-05-13

Last modified

2026-10-26

Weaknesses

CWE-787

Affected products

• Pan-os (Palo Alto Networks)
• Pan-os (Paloaltonetworks)

References

• https://security.paloaltonetworks.com/CVE-2026-0263