CVE-2026-0318: PAN-OS: Denial of Service (DoS) on Panorama (Severity: MEDIUM)

Published Oct 14, 2026

Updated

A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software on Panorama enables an attacker to cause a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the Panorama entering maintenance mode.

Cloud NGFW, Prisma® Access, and standalone PAN-OS firewalls are not affected by this vulnerability.

Affected Software

2 affected components

Palo Alto Networks Cloud NGFW

Palo Alto Networks Prisma Access

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Palo Alto Networks PAN-OS on Panorama to a version that resolves this vulnerability.
Fixed in 11.1.4-h37
Upgrade
Upgrade Palo Alto Networks PAN-OS on Panorama to a version that resolves this vulnerability.
Fixed in 11.1.16-h3
Upgrade
Upgrade Palo Alto Networks PAN-OS on Panorama to a version that resolves this vulnerability.
Fixed in 11.1.13-h15
Upgrade
Upgrade Palo Alto Networks PAN-OS on Panorama to a version that resolves this vulnerability.
Fixed in 11.1.6-h39
Upgrade
Upgrade Palo Alto Networks PAN-OS on Panorama to a version that resolves this vulnerability.
Fixed in 11.1.7-h11
Upgrade
Upgrade Palo Alto Networks PAN-OS on Panorama to a version that resolves this vulnerability.
Fixed in 11.1.10-h35
Upgrade
Upgrade Palo Alto Networks PAN-OS on Panorama to a version that resolves this vulnerability.
Fixed in 11.2.4-h22
Upgrade
Upgrade Palo Alto Networks PAN-OS on Panorama to a version that resolves this vulnerability.
Fixed in 11.2.15
Upgrade
Upgrade Palo Alto Networks PAN-OS on Panorama to a version that resolves this vulnerability.
Fixed in 11.2.13-h3
Upgrade
Upgrade Palo Alto Networks PAN-OS on Panorama to a version that resolves this vulnerability.
Fixed in 11.2.7-h21
Upgrade
Upgrade Palo Alto Networks PAN-OS on Panorama to a version that resolves this vulnerability.
Fixed in 11.2.10-h15
Upgrade
Upgrade Palo Alto Networks PAN-OS on Panorama to a version that resolves this vulnerability.
Fixed in 12.1.4-h12
Upgrade
Upgrade Palo Alto Networks PAN-OS on Panorama to a version that resolves this vulnerability.
Fixed in 12.1.10-h2
Upgrade
Upgrade Palo Alto Networks PAN-OS on Panorama to a version that resolves this vulnerability.
Fixed in 12.1.7-h8
Upgrade
Upgrade Palo Alto Networks PAN-OS on Panorama to a version that resolves this vulnerability.
Fixed in 12.2.4
Compensating control
Limit access to Panorama to only known good IP addresses.

Event History

Oct 14, 2026

Advisory Published

via Palo Alto Networks·04:00 PM

Data Sourced

via Palo Alto Networks·04:00 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

Which Palo Alto Networks deployments are explicitly not affected?

Cloud NGFW, Prisma Access, and standalone PAN-OS firewalls are not affected. The affected product context is PAN-OS running on Panorama.

What is the likely operational impact of repeated exploitation attempts?

Repeated attempts to trigger the issue cause Panorama to enter maintenance mode. The provided impact metrics indicate a high availability impact, with no stated impact to confidentiality or integrity.

Does exploitation require an authenticated account or user interaction?

The provided metrics indicate no privileges are required and no user interaction is required. The attack vector is network-based, although the metrics also indicate an attack requirement is present.