A buffer overflow vulnerability in the IKEv2 processing of Palo Alto Networks PAN-OS® software allows an unauthenticated network-based attacker to execute arbitrary code with elevated privileges on the firewall, or cause a denial of service (DoS) condition. Panorama, Cloud NGFW, and Prisma® Access are not impacted by these vulnerabilities.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://security.paloaltonetworks.com/CVE-2026-0263 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.2 · paloaltonetworksNVD modified 2026-10-26 17:10
Affected (CPE criteria) 94
cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:-:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h1:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h10:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h11:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h12:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h13:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h15:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h16:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h17:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h18:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h2:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h25:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h27:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h3:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h32:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h4:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h5:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h6:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h7:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h8:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h9:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:-:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h1:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h10:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h14:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h17:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h18:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h19:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h2:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h20:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h21:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h22:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h23:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h25:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h29:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h3:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h4:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h5:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h6:*:*:*:*:*:*- and 54 more
References 1
- https://security.paloaltonetworks.com/CVE-2026-0263 Vendor Advisory