CVE intelligence

CVE-2026-0326

Vulnerability intelligence

Published Nov 11, 2026Sources checked Nov 11, 2026

1.7LOWCVSS out of 10

What this means

Review the available evidence

CVE-2026-0326 and is rated Low severity with a CVSS score of 1.7. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.

What to do next

Remediation and response

Palo Alto Networks Security Advisories guidance

Vendor revision: Nov 11, 2026

Vendor remediation details

VERSION MINOR VERSION SUGGESTED SOLUTION Cloud NGFW Customers who prefer to upgrade can work with Palo Alto Networks support to schedule an on-demand software upgrade. PAN-OS 12.2 12.2.0 through 12.2.4-h* Upgrade to 12.2.4-h2 or later. PAN-OS 12.1 12.1.0 through 12.1.10-h* Upgrade to 12.1.10-h4 or later. PAN-OS 11.2 11.2.0 through 11.2.16-h* Upgrade to 11.2.16-h2 or later. PAN-OS 11.1 11.1.0 through 11.1.16-h* Upgrade to 11.1.16-h5 or later. All older Upgrade to a supported fixed version. unsupported PAN-OS versions Prisma Access No action needed.

Vendor-listed releases

Cloud NGFW None*
PAN-OS 12.2 >= 12.2.4-h2
PAN-OS 12.1 >= 12.1.10-h4
PAN-OS 11.2 >= 11.2.16-h2
PAN-OS 11.1 >= 11.1.16-h5
Prisma Access All

CISA KEVNot listedBased on the latest collected catalog

EPSSUnavailableNo current score collected

Ransomware useNot markedCISA KEV ransomware field

Threat actors0Source-linked actor relationships

Overview

What is CVE-2026-0326?

A buffer overflow vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to disrupt service processing by causing a service process crash or memory corruption.

Panorama and Prisma® Access are not affected by this vulnerability.

Source: NVD