CVE-2026-0264

paloaltonetworks pan-os

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2026-0264

Katalog CVE

CVSS 9.8 · Critical EPSS 0,47%

Kerentanan Heap-based Buffer Overflow pada paloaltonetworks pan-os. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo Alto Networks PAN-OS® Software allows an unauthenticated attacker with network access to cause a denial of service (DoS) condition (all PAN-OS platforms except Cloud NGFW and Prisma Access) or potentially execute arbitrary code by sending specially crafted network traffic (PA-Series hardware only). Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.

Rincian

Terbit di NVD
13 Mei 2026
Terakhir diubah
14 Juli 2026
Status NVD
Analyzed
CVSS 3.1
9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-122: Heap-based Buffer Overflow
EPSS (30 hari)
0,47% peluang dieksploitasi; lebih tinggi dari 39,2% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
paloaltonetworks pan-os Semua versi sebelum 10.2.7
paloaltonetworks pan-os Versi 10.2.8 hingga sebelum 10.2.10
paloaltonetworks pan-os Versi 10.2.11 hingga sebelum 10.2.13
paloaltonetworks pan-os Versi 10.2.14 hingga sebelum 10.2.16
paloaltonetworks pan-os Versi 10.2.7
paloaltonetworks pan-os Versi 10.2.7 h1
paloaltonetworks pan-os Versi 10.2.7 h10
paloaltonetworks pan-os Versi 10.2.7 h11
paloaltonetworks pan-os Versi 10.2.7 h12
paloaltonetworks pan-os Versi 10.2.7 h13
paloaltonetworks pan-os Versi 10.2.7 h14
paloaltonetworks pan-os Versi 10.2.7 h15
paloaltonetworks pan-os Versi 10.2.7 h16
paloaltonetworks pan-os Versi 10.2.7 h17
paloaltonetworks pan-os Versi 10.2.7 h18
paloaltonetworks pan-os Versi 10.2.7 h19
paloaltonetworks pan-os Versi 10.2.7 h2
paloaltonetworks pan-os Versi 10.2.7 h20
paloaltonetworks pan-os Versi 10.2.7 h21
paloaltonetworks pan-os Versi 10.2.7 h22
paloaltonetworks pan-os Versi 10.2.7 h23
paloaltonetworks pan-os Versi 10.2.7 h24
paloaltonetworks pan-os Versi 10.2.7 h3
paloaltonetworks pan-os Versi 10.2.7 h32
paloaltonetworks pan-os Versi 10.2.7 h4
paloaltonetworks pan-os Versi 10.2.7 h5
paloaltonetworks pan-os Versi 10.2.7 h6
paloaltonetworks pan-os Versi 10.2.7 h7
paloaltonetworks pan-os Versi 10.2.7 h8
paloaltonetworks pan-os Versi 10.2.7 h9
paloaltonetworks pan-os Versi 10.2.10
paloaltonetworks pan-os Versi 10.2.10 h1
paloaltonetworks pan-os Versi 10.2.10 h10
paloaltonetworks pan-os Versi 10.2.10 h11
paloaltonetworks pan-os Versi 10.2.10 h12
paloaltonetworks pan-os Versi 10.2.10 h13
paloaltonetworks pan-os Versi 10.2.10 h14
paloaltonetworks pan-os Versi 10.2.10 h17
paloaltonetworks pan-os Versi 10.2.10 h18
paloaltonetworks pan-os Versi 10.2.10 h2
paloaltonetworks pan-os Versi 10.2.10 h21
paloaltonetworks pan-os Versi 10.2.10 h27
paloaltonetworks pan-os Versi 10.2.10 h3
paloaltonetworks pan-os Versi 10.2.10 h30
paloaltonetworks pan-os Versi 10.2.10 h31
paloaltonetworks pan-os Versi 10.2.10 h36
paloaltonetworks pan-os Versi 10.2.10 h4
paloaltonetworks pan-os Versi 10.2.10 h5
paloaltonetworks pan-os Versi 10.2.10 h6
paloaltonetworks pan-os Versi 10.2.10 h7
paloaltonetworks pan-os Versi 10.2.10 h8
paloaltonetworks pan-os Versi 10.2.13
paloaltonetworks pan-os Versi 10.2.13 h1
paloaltonetworks pan-os Versi 10.2.13 h10
paloaltonetworks pan-os Versi 10.2.13 h15
paloaltonetworks pan-os Versi 10.2.13 h16
paloaltonetworks pan-os Versi 10.2.13 h18
paloaltonetworks pan-os Versi 10.2.13 h2
paloaltonetworks pan-os Versi 10.2.13 h3
paloaltonetworks pan-os Versi 10.2.13 h4

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 173 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.