Vulnerability in Palo Alto Networks Cloud NGFW

[ Description ]Official description

A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software on Panorama enables an attacker to cause a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the Panorama entering maintenance mode. Cloud NGFW, Prisma® Access, and standalone PAN-OS firewalls are not affected by this vulnerability.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• CERT-FR15 Oct 2026CERTFR-2026-AVI-1326

  Multiple vulnerabilities in Palo Alto Networks products Translated from French

  Multiple vulnerabilities have been discovered in Palo Alto Networks products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service. Palo Alto…

  CVE-2026-87464CVE-2026-87646CVE-2026-87445+458 more CVEs
• BSI CERT-Bund14 Oct 2026WID-SEC-2026-3947

  Palo Alto Networks PAN-OS: Multiple vulnerabilities Translated from German

  CVE-2026-0317CVE-2026-0322CVE-2026-0318+4 more CVEs

[ References ]References

• security.paloaltonetworks.com/CVE-2026-0318