CVE-2026-0264: Buffer Overflow in Palo Alto Networks PAN-OS

CVE-2026-0264 is a buffer overflow in the DNS proxy and DNS Server features of Palo Alto Networks PAN-OS® that allows an unauthenticated attacker with network access to cause a denial of service (DoS) condition on all platforms (except Cloud NGFW and Prisma Access) or potentially execute arbitrary code on PA-Series hardware. Panorama, Cloud NGFW, and Prisma Access are not affected.

The vulnerability has a CVSS score of 9.8, classified as critical by the official source. As of November 2026, a GitHub repository has been reported that claims to contain exploits, indicating a progression from the initial publication in May 2026 toward public availability of attack code. It is not confirmed by the data whether the vulnerability is currently being actively exploited in real-world scenarios, but the availability of exploits represents an escalated risk signal.

For organizations managing PAN-OS, it is essential to immediately verify the inventory of exposed systems, particularly PA-Series appliances where the RCE risk is more severe. Apply security patches as soon as they become available from Palo Alto Networks official channels and monitor DNS logs for anomalous activity that may indicate exploitation attempts.