This vulnerability (CVE-2026-0310) involves a buffer overflow in the XML processing component of PAN-OS software by Palo Alto Networks. An unauthenticated attacker with network access to either the management web interface or the dataplane interface can exploit this flaw. Exploitation can lead to denial of service on VM-Series firewalls or arbitrary code execution with root privileges on PA-Series firewalls. Panorama management software is also affected. The vulnerability is categorized under CWE-787 (Out-of-bounds Write). No patch or official remediation details are provided in the available data. The vendor recommends restricting management interface access to trusted internal IP addresses to minimize risk.

Successful exploitation can cause denial of service on VM-Series firewalls or allow arbitrary code execution with root privileges on PA-Series firewalls, potentially leading to full system compromise. Panorama management software is also vulnerable, which could impact centralized management. The vulnerability requires network access but no authentication, increasing its risk if management interfaces are exposed. The overall severity is high.

No patch or official fix status is provided in the available information. The vendor recommends restricting access to the management interface to trusted internal IP addresses as a best practice to minimize risk. Users should follow Palo Alto Networks' guidance on securing management access. Patch status is not yet confirmed—check the vendor advisory for current remediation guidance.