---
id: CVE-2026-0310
title: >-
  A buffer overflow vulnerability in the XML processing functionality of Palo
  Alto Networks PAN-OS® software enables an unauthenticated attacker with
  network access to the management web or dataplane interface to cause a denial
  of service …
summary: >-
  A buffer overflow vulnerability in the XML processing functionality of Palo
  Alto Networks PAN-OS® software enables an unauthenticated attacker with
  network access to the management web or dataplane interface to cause a denial
  of service …
severity: high
cvss: 7.2
cvssVector: >-
  CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Red
cwe:
  - CWE-787
vendor: Palo Alto Networks
product: Cloud NGFW
affected:
  - cloud_ngfw All
  - PAN-OS >= 12.2.0 < 12.2.3
  - PAN-OS >= 12.1.0 < 12.1.4-h10
  - PAN-OS >= 11.2.0 < 11.2.4-h21
  - PAN-OS >= 11.1.0 < 11.1.4-h36
  - PAN-OS >= 10.2.0 < 10.2.7-h37
  - prisma_access >= 11.2.0 < 11.2.4-h21
  - prisma_access >= 10.2.0 < 10.2.7-h37
published: '2026-09-10'
updated: '2026-09-11'
sourceUpdated: '2026-09-11T04:17:13.060'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-0310'
references:
  - url: 'https://security.paloaltonetworks.com/CVE-2026-0310'
    label: psirt@paloaltonetworks.com
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-09-10T00:00:00+00:00'
cvssSource: cna
ingestedAt: '2026-09-13T20:17:59.110Z'
epss: 0.00337
epssPercentile: 0.27175
---

## Overview

A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web or dataplane interface to cause a denial of service (DoS) condition on VM-Series firewalls or execute arbitrary code with root privileges on the PA-Series firewalls.

The security risk posed by this issue is minimized when the management interface is restricted to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . 

Panorama is impacted by this vulnerability.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.