Product:
PAN-OS
Summary
A buffer overflow vulnerability in the IKEv2 processing of Palo Alto Networks PAN-OS software allows an unauthenticated network-based attacker to execute arbitrary code with elevated privileges on the firewall or cause a denial of service condition. Panorama, Cloud NGFW, and Prisma Access are not impacted by these vulnerabilities.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.2 | CVE-2026-0263 |
Exploitation
To exploit this vulnerability, an attacker must send specially crafted IKEv2 packets to the affected PAN-OS device. Due to the buffer overflow, this can lead to arbitrary code execution with elevated privileges or result in a denial of service condition, compromising the firewall’s functionality.
Affected Products
- PAN-OS: Affected by the buffer overflow vulnerability in IKEv2 processing.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Palo Alto Networks. Additionally, network segmentation and monitoring for unusual IKEv2 traffic can help reduce the risk of exploitation.