CVE-2026-0263

paloaltonetworks pan-os

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2026-0263

Katalog CVE

CVSS 9.8 · Critical EPSS 0,37%

Kerentanan Out-of-bounds Write pada paloaltonetworks pan-os. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

A buffer overflow vulnerability in the IKEv2 processing of Palo Alto Networks PAN-OS® software allows an unauthenticated network-based attacker to execute arbitrary code with elevated privileges on the firewall, or cause a denial of service (DoS) condition. Panorama, Cloud NGFW, and Prisma® Access are not impacted by these vulnerabilities.

Rincian

Terbit di NVD
13 Mei 2026
Terakhir diubah
14 Juli 2026
Status NVD
Analyzed
CVSS 3.1
9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-787: Out-of-bounds Write
EPSS (30 hari)
0,37% peluang dieksploitasi; lebih tinggi dari 29,3% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
paloaltonetworks pan-os Versi 11.1.0 hingga sebelum 11.1.4
paloaltonetworks pan-os Versi 11.1.5 hingga sebelum 11.1.6
paloaltonetworks pan-os Versi 11.1.8 hingga sebelum 11.1.10
paloaltonetworks pan-os Versi 11.1.11 hingga sebelum 11.1.13
paloaltonetworks pan-os Versi 11.1.4
paloaltonetworks pan-os Versi 11.1.4 h1
paloaltonetworks pan-os Versi 11.1.4 h10
paloaltonetworks pan-os Versi 11.1.4 h11
paloaltonetworks pan-os Versi 11.1.4 h12
paloaltonetworks pan-os Versi 11.1.4 h13
paloaltonetworks pan-os Versi 11.1.4 h15
paloaltonetworks pan-os Versi 11.1.4 h16
paloaltonetworks pan-os Versi 11.1.4 h17
paloaltonetworks pan-os Versi 11.1.4 h18
paloaltonetworks pan-os Versi 11.1.4 h2
paloaltonetworks pan-os Versi 11.1.4 h25
paloaltonetworks pan-os Versi 11.1.4 h27
paloaltonetworks pan-os Versi 11.1.4 h3
paloaltonetworks pan-os Versi 11.1.4 h32
paloaltonetworks pan-os Versi 11.1.4 h4
paloaltonetworks pan-os Versi 11.1.4 h5
paloaltonetworks pan-os Versi 11.1.4 h6
paloaltonetworks pan-os Versi 11.1.4 h7
paloaltonetworks pan-os Versi 11.1.4 h8
paloaltonetworks pan-os Versi 11.1.4 h9
paloaltonetworks pan-os Versi 11.1.6
paloaltonetworks pan-os Versi 11.1.6 h1
paloaltonetworks pan-os Versi 11.1.6 h10
paloaltonetworks pan-os Versi 11.1.6 h14
paloaltonetworks pan-os Versi 11.1.6 h17
paloaltonetworks pan-os Versi 11.1.6 h18
paloaltonetworks pan-os Versi 11.1.6 h19
paloaltonetworks pan-os Versi 11.1.6 h2
paloaltonetworks pan-os Versi 11.1.6 h20
paloaltonetworks pan-os Versi 11.1.6 h21
paloaltonetworks pan-os Versi 11.1.6 h22
paloaltonetworks pan-os Versi 11.1.6 h23
paloaltonetworks pan-os Versi 11.1.6 h25
paloaltonetworks pan-os Versi 11.1.6 h29
paloaltonetworks pan-os Versi 11.1.6 h3
paloaltonetworks pan-os Versi 11.1.6 h4
paloaltonetworks pan-os Versi 11.1.6 h5
paloaltonetworks pan-os Versi 11.1.6 h6
paloaltonetworks pan-os Versi 11.1.6 h7
paloaltonetworks pan-os Versi 11.1.7
paloaltonetworks pan-os Versi 11.1.7 h1
paloaltonetworks pan-os Versi 11.1.7 h2
paloaltonetworks pan-os Versi 11.1.7 h4
paloaltonetworks pan-os Versi 11.1.10
paloaltonetworks pan-os Versi 11.1.10 h1
paloaltonetworks pan-os Versi 11.1.10 h10
paloaltonetworks pan-os Versi 11.1.10 h12
paloaltonetworks pan-os Versi 11.1.10 h21
paloaltonetworks pan-os Versi 11.1.10 h4
paloaltonetworks pan-os Versi 11.1.10 h5
paloaltonetworks pan-os Versi 11.1.10 h7
paloaltonetworks pan-os Versi 11.1.10 h9
paloaltonetworks pan-os Versi 11.1.13
paloaltonetworks pan-os Versi 11.1.13 h1
paloaltonetworks pan-os Versi 11.1.13 h2

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 102 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.