CVE-2026-0263

Published: May 13, 2026Modified: Jul 14, 2026

7.2

Vector

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:C/RE:H/U:Red

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:C/RE:H/U:RedShow less

Source: psirt@paloaltonetworks.com (Secondary)

Description

A buffer overflow vulnerability in the IKEv2 processing of Palo Alto Networks PAN-OS® software allows an unauthenticated network-based attacker to execute arbitrary code with elevated privileges on the firewall, or cause a denial of service (DoS) condition. Panorama, Cloud NGFW, and Prisma® Access are not impacted by these vulnerabilities.

Affected (102)

Products: Paloaltonetworks: Pan Os

Paloaltonetworks

1 product

Pan Os

Configuration A

62 vulnerable

Vulnerable Software	Affected Versions
Paloaltonetworks Pan Os	From 11.1.0 to 11.1.4
Paloaltonetworks Pan Os	From 11.1.11 to 11.1.13
Paloaltonetworks Pan Os	From 11.1.5 to 11.1.6
Paloaltonetworks Pan Os	From 11.1.8 to 11.1.10
Paloaltonetworks Pan Os	Version 11.1.10
Paloaltonetworks Pan Os	Version 11.1.10 h10
Paloaltonetworks Pan Os	Version 11.1.10 h12
Paloaltonetworks Pan Os	Version 11.1.10 h1
Paloaltonetworks Pan Os	Version 11.1.10 h21
Paloaltonetworks Pan Os	Version 11.1.10 h4
Paloaltonetworks Pan Os	Version 11.1.10 h5
Paloaltonetworks Pan Os	Version 11.1.10 h7
Paloaltonetworks Pan Os	Version 11.1.10 h9
Paloaltonetworks Pan Os	Version 11.1.13
Paloaltonetworks Pan Os	Version 11.1.13 h1
Paloaltonetworks Pan Os	Version 11.1.13 h2
Paloaltonetworks Pan Os	Version 11.1.13 h3
Paloaltonetworks Pan Os	Version 11.1.14
Paloaltonetworks Pan Os	Version 11.1.4
Paloaltonetworks Pan Os	Version 11.1.4 h10
Paloaltonetworks Pan Os	Version 11.1.4 h11
Paloaltonetworks Pan Os	Version 11.1.4 h12
Paloaltonetworks Pan Os	Version 11.1.4 h13
Paloaltonetworks Pan Os	Version 11.1.4 h15
Paloaltonetworks Pan Os	Version 11.1.4 h16
Paloaltonetworks Pan Os	Version 11.1.4 h17
Paloaltonetworks Pan Os	Version 11.1.4 h18
Paloaltonetworks Pan Os	Version 11.1.4 h1
Paloaltonetworks Pan Os	Version 11.1.4 h25
Paloaltonetworks Pan Os	Version 11.1.4 h27
Paloaltonetworks Pan Os	Version 11.1.4 h2
Paloaltonetworks Pan Os	Version 11.1.4 h32
Paloaltonetworks Pan Os	Version 11.1.4 h3
Paloaltonetworks Pan Os	Version 11.1.4 h4
Paloaltonetworks Pan Os	Version 11.1.4 h5
Paloaltonetworks Pan Os	Version 11.1.4 h6
Paloaltonetworks Pan Os	Version 11.1.4 h7
Paloaltonetworks Pan Os	Version 11.1.4 h8
Paloaltonetworks Pan Os	Version 11.1.4 h9
Paloaltonetworks Pan Os	Version 11.1.6
Paloaltonetworks Pan Os	Version 11.1.6 h10
Paloaltonetworks Pan Os	Version 11.1.6 h14
Paloaltonetworks Pan Os	Version 11.1.6 h17
Paloaltonetworks Pan Os	Version 11.1.6 h18
Paloaltonetworks Pan Os	Version 11.1.6 h19
Paloaltonetworks Pan Os	Version 11.1.6 h1
Paloaltonetworks Pan Os	Version 11.1.6 h20
Paloaltonetworks Pan Os	Version 11.1.6 h21
Paloaltonetworks Pan Os	Version 11.1.6 h22
Paloaltonetworks Pan Os	Version 11.1.6 h23
Paloaltonetworks Pan Os	Version 11.1.6 h25
Paloaltonetworks Pan Os	Version 11.1.6 h29
Paloaltonetworks Pan Os	Version 11.1.6 h2
Paloaltonetworks Pan Os	Version 11.1.6 h3
Paloaltonetworks Pan Os	Version 11.1.6 h4
Paloaltonetworks Pan Os	Version 11.1.6 h5
Paloaltonetworks Pan Os	Version 11.1.6 h6
Paloaltonetworks Pan Os	Version 11.1.6 h7
Paloaltonetworks Pan Os	Version 11.1.7
Paloaltonetworks Pan Os	Version 11.1.7 h1
Paloaltonetworks Pan Os	Version 11.1.7 h2
Paloaltonetworks Pan Os	Version 11.1.7 h4

Configuration B

35 vulnerable

Vulnerable Software	Affected Versions
Paloaltonetworks Pan Os	From 11.2.0 to 11.2.4
Paloaltonetworks Pan Os	From 11.2.5 to 11.2.7
Paloaltonetworks Pan Os	From 11.2.8 to 11.2.10
Paloaltonetworks Pan Os	Version 11.2.10
Paloaltonetworks Pan Os	Version 11.2.10 h1
Paloaltonetworks Pan Os	Version 11.2.10 h2
Paloaltonetworks Pan Os	Version 11.2.10 h3
Paloaltonetworks Pan Os	Version 11.2.10 h4
Paloaltonetworks Pan Os	Version 11.2.10 h5
Paloaltonetworks Pan Os	Version 11.2.11
Paloaltonetworks Pan Os	Version 11.2.4
Paloaltonetworks Pan Os	Version 11.2.4 h10
Paloaltonetworks Pan Os	Version 11.2.4 h11
Paloaltonetworks Pan Os	Version 11.2.4 h12
Paloaltonetworks Pan Os	Version 11.2.4 h14
Paloaltonetworks Pan Os	Version 11.2.4 h15
Paloaltonetworks Pan Os	Version 11.2.4 h1
Paloaltonetworks Pan Os	Version 11.2.4 h2
Paloaltonetworks Pan Os	Version 11.2.4 h3
Paloaltonetworks Pan Os	Version 11.2.4 h4
Paloaltonetworks Pan Os	Version 11.2.4 h5
Paloaltonetworks Pan Os	Version 11.2.4 h6
Paloaltonetworks Pan Os	Version 11.2.4 h7
Paloaltonetworks Pan Os	Version 11.2.4 h8
Paloaltonetworks Pan Os	Version 11.2.4 h9
Paloaltonetworks Pan Os	Version 11.2.7
Paloaltonetworks Pan Os	Version 11.2.7 h10
Paloaltonetworks Pan Os	Version 11.2.7 h11
Paloaltonetworks Pan Os	Version 11.2.7 h12
Paloaltonetworks Pan Os	Version 11.2.7 h1
Paloaltonetworks Pan Os	Version 11.2.7 h2
Paloaltonetworks Pan Os	Version 11.2.7 h3
Paloaltonetworks Pan Os	Version 11.2.7 h4
Paloaltonetworks Pan Os	Version 11.2.7 h7
Paloaltonetworks Pan Os	Version 11.2.7 h8

Configuration C

5 vulnerable

Vulnerable Software	Affected Versions
Paloaltonetworks Pan Os	From 12.1.0 to 12.1.4
Paloaltonetworks Pan Os	From 12.1.5 to 12.1.7
Paloaltonetworks Pan Os	Version 12.1.4
Paloaltonetworks Pan Os	Version 12.1.4 h2
Paloaltonetworks Pan Os	Version 12.1.4 h3

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (1)

https://security.paloaltonetworks.com/CVE-2026-0263

Source: psirt@paloaltonetworks.com

Vendor Advisory

Timeline

No history available yet.