{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/prisma-access-10.2-11.2-12.1/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"id":"CVE-2026-0329"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["PAN-OS (10.2, 11.1, 11.2, 12.1, 12.2)","Prisma Access (10.2, 11.2, 12.1)"],"_cs_severities":["medium"],"_cs_tags":["cve","denial-of-service","network-security","firewall"],"_cs_type":"advisory","_cs_vendors":["Palo Alto Networks"],"content_html":"\u003cp\u003ePalo Alto Networks has disclosed a buffer overflow vulnerability (CVE-2026-0329) in PAN-OS software. An unauthenticated attacker with network access can cause a denial of service (DoS) by sending specially crafted network traffic to or through a dataplane interface. This issue does not affect Cloud NGFW or Panorama. Exploitation requires specific configurations to be present, specifically an active IKE Gateway using certificate-based authentication with CRL or OCSP revocation enabled, or an active DNS Proxy object.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation results in a denial of service condition affecting the availability of the targeted firewall device. Palo Alto Networks reports no known exploitation in the wild.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade affected PAN-OS installations to the specified fixed versions listed in the vendor advisory.\u003c/li\u003e\n\u003cli\u003eIf immediate patching is not possible, disable CRL and OCSP revocation checking on active IKE Gateways and disable configured DNS Proxy objects.\u003c/li\u003e\n\u003cli\u003eUtilize the provided Threat IDs 510051 and 510052 for customers with active Threat Prevention subscriptions, noting that this requires SSL decryption for traffic directed to the management interface.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-11T21:53:47Z","date_published":"2026-11-11T21:53:47Z","id":"https://feed.craftedsignal.io/briefs/2026-11-pan-os-buffer-overflow-cve-2026-0329/","summary":"A buffer overflow vulnerability in Palo Alto Networks PAN-OS software allows an unauthenticated network attacker to trigger a denial of service condition when specific IKE Gateway or DNS Proxy configurations are present.","title":"Palo Alto Networks PAN-OS: Denial of Service via Buffer Overflow (CVE-2026-0329)","url":"https://feed.craftedsignal.io/briefs/2026-11-pan-os-buffer-overflow-cve-2026-0329/"}],"language":"en","title":"CraftedSignal Threat Feed - Prisma Access (10.2, 11.2, 12.1)","version":"https://jsonfeed.org/version/1.1"}