CVE-2026-0310

published 2026-09-10

CVE-2026-0310: A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network…

Priority P3 52 high 7.2 CVSS 4.0

AV N AC H AT N PR N UI N VC H VI H VA H SC L SI L SA N E U CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU N R U V D RE M U Red

A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web or dataplane interface to cause a denial of service (DoS) condition on VM-Series firewalls or execute arbitrary code with root privileges on the PA-Series firewalls.

The security risk posed by this issue is minimized when the management interface is restricted to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .

Panorama is impacted by this vulnerability.

Affected

11 ranges

Vendor	Product	Version range	Fixed in
palo_alto_networks	cloud_ngfw	—	—
palo_alto_networks	pan-os	>= 10.2.0 < 10.2.7-h37	10.2.7-h37
palo_alto_networks	pan-os	>= 11.1.0 < 11.1.4-h36	11.1.4-h36
palo_alto_networks	pan-os	>= 11.2.0 < 11.2.4-h21	11.2.4-h21
palo_alto_networks	pan-os	>= 12.1.0 < 12.1.4-h10	12.1.4-h10
palo_alto_networks	pan-os	>= 12.2.0 < 12.2.3	12.2.3
palo_alto_networks	prisma_access	>= 10.2.0 < 10.2.7-h37	10.2.7-h37
palo_alto_networks	prisma_access	>= 11.2.0 < 11.2.4-h21	11.2.4-h21
paloalto	cloud_ngfw	—	—
paloalto	pan-os	—	—
paloalto	prisma_access	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-787