CVE-2026-0264
A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo Alto Networks PAN-OS® Software allows an unauthenticated attacker with network access to cause a denial of service (DoS) condition (all PAN-OS platforms except Cloud NGFW and Prisma Access) or potentially execute arbitrary code by sending specially crafted network traffic (PA-Series hardware only). Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Analyzed - psirt@paloaltonetworks.com
- Published
- 2026-05-13
- Last modified
- 2026-10-26
- Weaknesses
- CWE-122
Affected products
- Pan-os (Palo Alto Networks)
- Pan-os (Paloaltonetworks)
- Ruggedcom Ape1808 (Siemens)
- Ruggedcom Ape1808 Firmware (Siemens)
References
- https://security.paloaltonetworks.com/CVE-2026-0264
- https://cert-portal.siemens.com/productcert/html/ssa-967325.html
