CVE-2026-0310

highpriority · track · 0EPSS 0.004 · 38 %ileDENLRU

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.44% (38th) EPSS

CVSS 8.1 · high

Is it mine?

33 products

Check your exposure

Who says so?

4 sources

fstec_bdu · cert_bund · ncsc_nl · siemens_psirt

EPSS · scored 2026-10-22

A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web or dataplane interface to cause a denial of service (DoS) condition on VM-Series firewalls or execute arbitrary code with root privileges on the PA-Series firewalls. The security risk posed by this issue is minimized when the management interface is restricted to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . Panorama is impacted by this vulnerability.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedRUGGEDCOM APE1808siemens_psirt
Contact customer support to receive patch and update information

cvss

Technical severity, 0–10. One row per scoring source.

9.0

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 7.2–9

v3.18.1highAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.19criticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · Siemens ProductCERT DE

v4.07.2highCVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Redsecondary · psirt@paloaltonetworks.com

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-787USCWE-787USCWE-787USCWE-787US

affected products (33)

Products and version ranges known to be affected.

Palo Alto Networks PAN-OS 11.2all versionscert_bundDEcpe:/o:paloaltonetworks:pan-os:11.2
Palo Alto Networks PAN-OS 12.1all versionscert_bundDEcpe:/o:paloaltonetworks:pan-os:12.1
Palo Alto Networks PAN-OS 12.2all versionscert_bundDEcpe:/o:paloaltonetworks:pan-os:12.2
PaloAlto Networks PAN-OS 10.2all versionscert_bundDEcpe:/o:paloaltonetworks:pan-os:10.2
PaloAlto Networks PAN-OS 11.1all versionscert_bundDEcpe:/o:paloaltonetworks:pan-os:11.1
Palo Alto Networks Inc. Cloud NGFWall versionsfstec_bduRU
Palo Alto Networks Inc. PAN-OS≤ 11.2.7-h20fstec_bduRU
Palo Alto Networks Inc. PAN-OS≤ 11.2.10-h14fstec_bduRU
Palo Alto Networks Inc. PAN-OS≤ 11.2.13-h2fstec_bduRU
Palo Alto Networks Inc. PAN-OS≤ 11.1.6-h38fstec_bduRU
Palo Alto Networks Inc. PAN-OS≤ 11.1.7-h10fstec_bduRU
Palo Alto Networks Inc. PAN-OS≤ 11.1.10-h33fstec_bduRU
Palo Alto Networks Inc. PAN-OS≤ 11.1.13-h12fstec_bduRU
Palo Alto Networks Inc. PAN-OS≤ 11.1.16-h2fstec_bduRU
Palo Alto Networks Inc. PAN-OS≤ 10.2.7-h37fstec_bduRU
Palo Alto Networks Inc. PAN-OS≤ 10.2.10-h40fstec_bduRU
Palo Alto Networks Inc. PAN-OS≤ 10.2.13-h24fstec_bduRU
Palo Alto Networks Inc. PAN-OS≤ 10.2.16-h10fstec_bduRU
Palo Alto Networks Inc. PAN-OS≤ 10.2.18-h10fstec_bduRU
Palo Alto Networks Inc. PAN-OS≤ 11.1.4-h36fstec_bduRU

showing 20 of 33

advisories (3)

Vendor and ecosystem advisories describing this.

NCSC-2026-0369Kwetsbaarheid verholpen in Palo Alto Networks PAN-OSNL2026-09-15csaf · ncsc_nlNL
Palo Alto Networks heeft een kwetsbaarheid verholpen in PAN-OS software, specifiek voor VM-Series en PA-Series firewalls, evenals Panorama management software.
SSA-104023SSA-104023: Multiple Vulnerabilities in Palo Alto Networks PAN-OS on RUGGEDCOM APE1808 Devices2026-07-14csaf · siemens_psirtDE
Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Customers are advised to consult and implement the workarounds provided in Palo Alto Networks' upstream security notifications. [1] https://security.paloaltonetworks.com/
WID-SEC-W-2026-3295Palo Alto Networks PAN-OS: Mehrere SchwachstellenDeutsch2026-09-09csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Palo Alto Networks PAN-OS ausnutzen, um Cross-Site-Scripting-Angriffe durchzuführen, Code mit Root-Rechten auszuführen oder einen Denial-of-Service-Zustand auszulösen.

also known as (1)

Other names and identifiers for this entity.

BDU:2026-14570 fstec_bdu

sources

Which sources assert this record, and when.

fstec_bdu cert_bund ncsc_nl siemens_psirt NVD CVE.org MITRE

published 2026-09-10modified 2026-10-15

references (2) nvd

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan