{"id":"CVE-2026-0318","title":"A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software on Panorama enables an attacker to cause a denial of service (DoS) condition","summary":"A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software on Panorama enables an attacker to cause a denial of service (DoS) condition. Repeated attempts to trigger this condit…","severity":"medium","cvss":4.6,"cvssVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber","cwe":["CWE-754"],"vendor":"Palo Alto Networks","product":"Cloud NGFW","affected":["cloud_ngfw","PAN-OS >= 12.2.0 < 12.2.4","PAN-OS >= 12.1.0 < 12.1.10-h2","PAN-OS >= 11.2.0 < 11.2.16","PAN-OS >= 11.1.0 < 11.1.16-h3","prisma_access"],"published":"2026-10-14","updated":"2026-10-15","sourceUpdated":"2026-10-15T19:17:11.940","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-0318","references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0318","label":"psirt@paloaltonetworks.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-15T18:48:12.298954Z"},"cvssSource":"cna","ingestedAt":"2026-10-14T21:57:04.817Z","epss":0.00317,"epssPercentile":0.24453,"slug":"CVE-2026-0318","body":"## Overview\n\nA stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software on Panorama enables an attacker to cause a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the Panorama entering maintenance mode.\n\nCloud NGFW, Prisma® Access, and standalone PAN-OS firewalls are not affected by this vulnerability.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":25,"depthScoreParts":{"impact":25.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":221917,"id":"CVE-2026-0318","ts":1792035917648,"field":"cvss","old":null,"new":"4.6"},{"seq":221916,"id":"CVE-2026-0318","ts":1792035917648,"field":"severity","old":"none","new":"medium"}]}