CVE-2026-0318

N/A

A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software on Panorama enables an attacker to cause a denial of service (DoS) condition. ...

Affects 0 products across 1 vendor.

CVSS v44.6
EPSS0.3%
Percentile23th
PatchUnknown
CWE Weakness Definitions
CWE-754: CWE-754
◆ AI Analysis — automated analysis, not human-reviewed

A unscored severity vulnerability (CVE-2026-0318) affects the target system. A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software on Panorama enables an attacker to cause a denial of service (DoS) condition. Repeated attempts to trigger this condition result in...

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2026-0318?
A unscored severity vulnerability (CVE-2026-0318) affects the target system. A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software on Panorama enables an attacker to cause a denial of service (DoS) condition. Repeated attempts to trigger this condition result in...
Is CVE-2026-0318 actively exploited?
No confirmed active exploitation of CVE-2026-0318 as of 2026-10-18.
How do I remediate CVE-2026-0318?
Advisory: https://security.paloaltonetworks.com/CVE-2026-0318
What systems are affected by CVE-2026-0318?
CVE-2026-0318 affects Palo Alto Networks.
Vulnerability Details
CVE IDCVE-2026-0318
Published2026-10-14
Last Modified2026-10-15
ICS Relevance65%
Weakness (CWE)
SourceNVD
Official Description

A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software on Panorama enables an attacker to cause a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the Panorama entering maintenance mode. Cloud NGFW, Prisma® Access, and standalone PAN-OS firewalls are not affected by this vulnerability.

Source: NIST NVD / MITRE CVE Database

Affected Products
VendorProductAffected Versions
Palo Alto Networks — —
Remediation
View Vendor Advisory →
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 3 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
Related CVEs affecting Palo Alto Networks
CVE-2012-6603 10.0 The web management UI in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x befor... CVE-2012-6592 10.0 Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5 allows remote ... CVE-2012-6593 10.0 Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote ... CVE-2012-6601 10.0 The device-management command-line interface in Palo Alto Networks PAN-OS bef... CVE-2020-2021 10.0 When Security Assertion Markup Language (SAML) authentication is enabled and ...
View all Palo Alto Networks CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →