CVE-2026-0263
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
A buffer overflow vulnerability in the IKEv2 processing of Palo Alto Networks PAN-OS software allows an unauthenticated network-based attacker to execute arbitrary code with elevated privileges on the firewall, or cause a denial of service (DoS) condition.
Risk Assessment
The risk includes full compromise of the firewall, potentially leading to network integrity breaches, data exfiltration, or service disruption.
Recommendation
Immediately apply patches provided by Palo Alto Networks for affected PAN-OS versions and restrict access to management and VPN interfaces.
Original NVD description (English source)
A buffer overflow vulnerability in the IKEv2 processing of Palo Alto Networks PAN-OS® software allows an unauthenticated network-based attacker to execute arbitrary code with elevated privileges on the firewall, or cause a denial of service (DoS) condition. Panorama, Cloud NGFW, and Prisma® Access are not impacted by these vulnerabilities.