Palo Alto Networks Releases Security Advisory for PAN-OS

Successful exploitation of CVE-2026-0310 may allow denial of service or root-level arbitrary code execution

Threat ID:: CC-4850
Threat Severity:: Medium
Published:: 11 September 2026 10:49 AM

Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Successful exploitation of CVE-2026-0310 may allow denial of service or root-level arbitrary code execution

Affected platforms

The following platforms are known to be affected:

Palo Alto Networks PAN-OS

PAN-OS 12.2

All prior to 12.2.3

PAN-OS 12.1

All prior to 12.1.4-h10
All prior to 12.1.7-h5
All prior to 12.1.10

PAN-OS 11.2

All prior to 11.2.4-h21
All prior to 11.2.7-h20
All prior to 11.2.10-h14
All prior to 11.2.13-h2

PAN-OS 11.1

All prior to 11.1.4-h36
All prior to 11.1.6-h38
All prior to 11.1.7-h10
All prior to 11.1.10-h33
All prior to 11.1.13-h12
All prior to 11.1.16-h2

PAN-OS 10.2

All prior to 10.2.7-h37
All prior to 10.2.10-h40
All prior to 10.2.13-h24
All prior to 10.2.16-h10
All prior to 10.2.18-h10

Prisma Access 12.1

All prior to 12.1.7-h5*

Prisma Access 11.2

All prior to 11.2.7-h20*

Prisma Access 10.2

All prior to 10.2.10-h40*

Cloud NGFW

All on Azure / AWS

Threat details

Introduction

Palo Alto Networks has released a security advisory to address a vulnerability in PAN-OS. Successful exploitation could allow an unauthenticated attacker with network access to the management web or dataplane interface to cause a denial-of-service condition or execute arbitrary code with root privileges on affected systems.

CVE-2026-0310 - Out-of-bounds Write vulnerability - CVSSv4 Base Score: 9.2

Remediation advice

Affected organisations are encouraged to review Palo Alto Networks advisory CVE-2026-0310 and apply the relevant update as soon as possible.

Definitive source of threat updates

https://security.paloaltonetworks.com/CVE-2026-0310

CVE Vulnerabilities

Status Published

CVE-2026-0310

A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web or dataplane interface to cause a denial of service (DoS) condition on VM-Series firewalls or execute arbitrary code with root privileges on the PA-Series firewalls. The security risk posed by this issue is minimized when the management interface is restricted to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . Panorama is impacted by this vulnerability.

Last edited: 11 September 2026 10:49 am