CVE-2026-0263
Critical
Description
A buffer overflow vulnerability in the IKEv2 processing of Palo Alto Networks PAN-OS® software allows an unauthenticated network-based attacker to execute arbitrary code with elevated privileges on the firewall, or cause a denial of service (DoS) condition. Panorama, Cloud NGFW, and Prisma® Access are not impacted by these vulnerabilities.
SeverityCritical
CVSS9.8
Exploit probability—
Product
Paloaltonetworks Pan-os
PublishedMay 13, 2026
First seenMay 13, 2026
Weakness typeCWE-787Out-of-bounds write
How to fix
Update
- paloaltonetworks pan-os11.1.4, 11.1.6, 11.1.10, 11.1.13, 11.2.4, 11.2.7, 11.2.10, 12.1.4, 12.1.7 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| paloaltonetworks pan-os | 11.1.0 ≤ v < 11.1.4, 11.1.5 ≤ v < 11.1.6, 11.1.8 ≤ v < 11.1.10, 11.1.11 ≤ v < 11.1.13, 11.1.4, 11.1.6, 11.1.7, 11.1.10, 11.1.13, 11.1.14, 11.2.0 ≤ v < 11.2.4, 11.2.5 ≤ v < 11.2.7, 11.2.8 ≤ v < 11.2.10, 11.2.4, 11.2.7, 11.2.10, 11.2.11, 12.1.0 ≤ v < 12.1.4, 12.1.5 ≤ v < 12.1.7, 12.1.4 | 11.1.4, 11.1.6, 11.1.10, 11.1.13, 11.2.4, 11.2.7, 11.2.10, 12.1.4, 12.1.7 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.