Critical remote code execution vulnerability affecting Palo Alto PAN-OS

PAN-OS is the operating system used by Palo Alto Networks' next-generation firewalls, including the PA-Series and VM-Series Appliances. This product is affected by a vulnerability labeled CVE-2026-0310, resulting from a buffer overflow when processing XML data. Exploitation of this vulnerability could allow an unauthenticated attacker with network access to the management web interface or data plane interface to send specially crafted XML data. On PA-Series firewalls, exploitation can lead to arbitrary code execution with root privileges. On VM-Series equipment, it can cause a denial of service. It is classified critical with a severity score of 9.8 according to CVSS v3.1.

• PAN-OS 11.2 versions earlier than 11.2.4-h21, 11.2.7-h20, 11.2.10-h14 or 11.2.13-h2, depending on the branch;
• PAN-OS 11.1 versions earlier than 11.1.4-h36, 11.1.6-h38, 11.1.7-h10, 11.1.10-h33, 11.1.13-h12 or 11.1.16-h2, depending on the branch;
• PAN-OS 10.2 versions earlier than 10.2.7-h37, 10.2.10-h40, 10.2.13-h24, 10.2.16-h10 or 10.2.18-h10, depending on the branch;