Skip to content
Threat Feed

Product

PAN-OS 10.2

2 briefs RSS
high threat

CVE-2026-0264 PAN-OS Heap-Based Buffer Overflow in DNS Proxy Allows RCE

CVE-2026-0264 is a heap-based buffer overflow vulnerability in Palo Alto Networks PAN-OS DNS proxy and DNS server features, allowing an unauthenticated attacker with network access to cause denial of service or potentially execute arbitrary code by sending crafted network traffic.

exploited PAN-OS 12.1 +3 cve heap-overflow rce dos network
2r 2t
medium advisory

CVE-2026-0256 PAN-OS Stored Cross-Site Scripting (XSS) Vulnerability

A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS allows a malicious authenticated administrator to inject a JavaScript payload via the web interface, potentially impacting other administrators.

PAN-OS 12.1 +3 xss cve web-interface
2r 1t