PAN-OS
CVE-2026-0310: Buffer Overflow Vulnerability via XML Processing
A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web or dataplane interface to cause a denial of service (DoS) condition on VM-Series firewalls or execute arbitrary code with root privileges on the PA-Series firewalls.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Cloud NGFW (AWS, Azure) | See the advisory |
| PAN-OS 12.2 | 12.2.3 or later |
| PAN-OS 12.1 | 12.1.4-h10, 12.1.7-h5, 12.1.10 or later |
| PAN-OS 11.2 | 11.2.4-h21, 11.2.7-h20, 11.2.10-h14, 11.2.13-h2 or later |
| PAN-OS 11.1 | 11.1.4-h36, 11.1.6-h38, 11.1.7-h10, 11.1.10-h33, 11.1.13-h12, 11.1.16-h2 or later |
| PAN-OS 10.2 | 10.2.7-h37, 10.2.10-h40, 10.2.13-h24, 10.2.16-h10, 10.2.18-h10 or later |
| Prisma Access 12.1 | Not affected |
| Prisma Access 11.2 | 11.2.7-h20 or later |
| Prisma Access 10.2 | 10.2.10-h40 or later |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web or dataplane interface to cause a denial of service (DoS) condition on VM-Series firewalls or execute arbitrary code with root privileges on the PA-Series firewalls.
Panorama is impacted by this vulnerability.
Am I affected?
No special configuration is required to be affected by this issue.
Workarounds
No known workarounds exist for this issue.
Exploitation
Palo Alto Networks is not aware of any malicious exploitation of this issue.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 10 Oct 2026.