Product:
PAN-OS
Summary
A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo Alto Networks PAN-OS Software allows an unauthenticated attacker with network access to cause a denial of service condition or potentially execute arbitrary code by sending specially crafted network traffic. This affects all PAN-OS platforms except Cloud NGFW and Prisma Access.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.2 | CVE-2026-0264 |
Exploitation
An attacker can exploit this vulnerability by sending specially crafted network traffic to the affected PAN-OS devices. If successful, this can lead to a denial of service condition or allow the execution of arbitrary code on the device, particularly on PA-Series hardware.
Affected Products
- All PAN-OS platforms except Cloud NGFW and Prisma Access
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Palo Alto Networks. Additionally, network access controls should be implemented to limit exposure to untrusted network traffic.