CVE-2026-0318
CVE-2026-0318 · PAN-OS: Denial of Service (DoS) on Panorama
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software on Panorama enables an attacker to cause a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the Panorama entering maintenance mode. Cloud NGFW, Prisma® Access, and standalone PAN-OS firewalls are not affected by this vulnerability.
CVSS 4.6 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Affected products and versions
cloud ngfw
- Versions
- All: Not affected (custom)
No fix published
pan-os
- Versions
- ≥ 12.2.0, < 12.2.4: Affected; ≥ 12.2.4: Not affected (custom)
- ≥ 12.1.0, < 12.1.10-h2: Affected; ≥ 12.1.4-h12: Not affected; ≥ 12.1.7-h8: Not affected; ≥ 12.1.10-h2: Not affected (custom)
- ≥ 11.2.0, < 11.2.16: Affected; ≥ 11.2.4-h22: Not affected; ≥ 11.2.7-h21: Not affected; ≥ 11.2.10-h15: Not affected; ≥ 11.2.13-h3: Not affected; ≥ 11.2.15: Not affected (custom)
- ≥ 11.1.0, < 11.1.16-h3: Affected; ≥ 11.1.4-h37: Not affected; ≥ 11.1.6-h39: Not affected; ≥ 11.1.7-h11: Not affected; ≥ 11.1.10-h35: Not affected; ≥ 11.1.13-h15: Not affected; ≥ 11.1.16-h3: Not affected (custom)
Update to 11.1.4-h37; Update to 11.2.4-h22; Update to 12.1.4-h12; Update to 12.2.4
prisma access
- Versions
- ≥ All, < 12.1.7-h8: Not affected; ≥ 12.1.7-h8: Not affected (custom)
No fix published