Plan ahead Medium Check your exposure CVSS 1.7 (NVD)
Palo Alto fixes low-severity PAN-OS buffer overflow
Palo Alto Networks advisoriesPalo Alto Networks PAN-OSCVE-2026-0326
What happened. Palo Alto Networks lists CVE-2026-0326, a buffer overflow in PAN-OS protocol and service processing. The vendor rates its severity as low.
Who is affected. Users of Palo Alto Networks PAN-OS. Industrial sites using these firewalls or gateways for remote access may be exposed, as vendors and engineers often reach plant systems through them.
What to do. Check whether you run PAN-OS and review the Palo Alto Networks advisory for CVE-2026-0326 for affected versions and fixes.
When to act. Plan ahead: No exploitation stated; check whether you run PAN-OS at the plant boundary and schedule the fix.
Editor's reading
Forasset ownerIT security
- Purdue level
- L5
- L3.5
Why: PAN-OS firewalls and gateways sit at the boundary between office IT and plant networks, in the industrial DMZ or at the enterprise edge.
- Are you exposed?
Check your asset inventory for PAN-OS firewalls and gateways and compare their versions with the advisory for CVE-2026-0326.
- If you cannot fix it yet
- Limit who can connect through PAN-OS gateways and require multi-factor authentication.
- Restrict access to firewall management interfaces to known administration hosts.
- Watch for
- Crashes or restarts of PAN-OS services that have no clear cause.
- Unusual traffic aimed at protocol and service processing on boundary firewalls.
Inferred from the facts above, not stated by the source. Check it against your own site before acting.
Source: Palo Alto Networks advisories (opens security.paloaltonetworks.com)