CVE-2026-0263

Опубликовано: 13 мая 2026

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

A buffer overflow vulnerability in the IKEv2 processing of Palo Alto Networks PAN-OS® software allows an unauthenticated network-based attacker to execute arbitrary code with elevated privileges on the firewall, or cause a denial of service (DoS) condition.

Panorama, Cloud NGFW, and Prisma® Access are not impacted by these vulnerabilities.

Ссылки

https://security.paloaltonetworks.com/CVE-2026-0263
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*

Версия от 11.1.0 (включая) до 11.1.4 (исключая)

cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*

Версия от 11.1.5 (включая) до 11.1.6 (исключая)

cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*

Версия от 11.1.8 (включая) до 11.1.10 (исключая)

cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*

Версия от 11.1.11 (включая) до 11.1.13 (исключая)

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h10:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h11:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h12:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h13:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h15:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h16:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h17:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h18:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h2:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h25:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h27:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h3:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h32:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h4:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h5:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h6:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h7:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h8:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h9:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h10:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h14:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h17:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h18:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h19:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h2:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h20:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h21:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h22:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h23:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h25:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h29:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h3:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h4:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h5:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h6:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h7:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h2:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h4:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h10:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h12:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h21:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h4:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h5:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h7:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h9:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h2:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h3:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.14:-:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*

Версия от 11.2.0 (включая) до 11.2.4 (исключая)

cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*

Версия от 11.2.5 (включая) до 11.2.7 (исключая)

cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*

Версия от 11.2.8 (включая) до 11.2.10 (исключая)

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h10:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h11:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h12:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h14:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h15:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h2:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h3:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h4:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h5:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h6:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h7:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h8:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h9:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h10:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h11:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h12:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h2:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h3:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h4:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h7:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h8:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h2:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h3:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h4:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h5:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.11:-:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*

Версия от 12.1.0 (включая) до 12.1.4 (исключая)

cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*

Версия от 12.1.5 (включая) до 12.1.7 (исключая)

cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h2:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h3:*:*:*:*:*:*

EPSS

Процентиль: 31%

0.00373

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-787

Связанные уязвимости

GHSA-xqxf-q4xj-jxh3

CVSS3: 9.8

github

4 месяца назад

BDU:2026-07382

CVSS3: 9

fstec

4 месяца назад

Уязвимость реализации протокола IKEv2 операционной системы PAN-OS, позволяющая нарушителю повысить свои привилегии, выполнить произвольный код или вызвать отказ в обслуживании

EPSS

Процентиль: 31%

0.00373

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-787