Palo Alto PAN-OS Flaw Lets Unauthenticated Attackers Execute Code as Root

Palo Alto Networks has disclosed a high-severity buffer overflow vulnerability in PAN-OS that could allow unauthenticated, network-based attackers to execute arbitrary code with root privileges on PA-Series hardware firewalls. Tracked as CVE-2026-0310, the flaw affects XML processing functionality in PAN-OS and was published on September 9, 2026. The vulnerability is classified as CWE-787, an out-of-bounds write issue caused by a buffer overflow during XML processing. An…