Vulnerability record/PUBLISHED/Published Nov 11, 2026 19:39:54 UTC
CVE-2026-0329
A buffer overflow vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Cloud NGFW and Panorama are not affected by this vulnerability.
Base score4.6/ 10
SeverityMediumCVSS 4.0
Exploitability / impact
CVSS metric breakdown
Base severityMedium
Attack vectorNetworkAV
Attack complexityLowAC
Attack requirementsPresentAT
Privileges requiredNonePR
User interactionNoneUI
Vulnerable system confidentialityNoneVC
Vulnerable system integrityNoneVI
Vulnerable system availabilityHighVA
Subsequent system confidentialityNoneSC
Subsequent system integrityNoneSI
Subsequent system availabilityNoneSA
Exploit maturityUnprovenE
AutomatableNoAU
RecoveryUserR
Value densityDiffuseV
Response effortModerateRE
Provider urgencyAmberU
CVSS vector string
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:AmberCVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.
Record context
CVE Numbering Authoritypalo_alto
Last updatedNov 13, 2026 19:36:51 UTC
PublishedNov 11, 2026 19:39:54 UTC
ReservedNov 3, 2025 20:46:31 UTC
Credits
- OpenAI
- Rotem Bar (internal reporter)
- Ben Nott (internal reporter)