This vulnerability (CWE-787) involves an out-of-bounds write in the IKEv2 processing of Palo Alto Networks PAN-OS software, specifically affecting the Cloud NGFW product. An unauthenticated attacker can exploit this buffer overflow to execute arbitrary code with elevated privileges or cause a denial of service. The CVSS 4.0 base score is 7.2, indicating high severity, with network attack vector, high complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. Panorama, Cloud NGFW, and Prisma Access are confirmed not impacted. No patch or official remediation level has been published yet.

Successful exploitation can lead to arbitrary code execution with elevated privileges on the affected firewall or cause a denial of service condition. This can compromise the firewall's security functions and potentially disrupt network operations. Since the vulnerability is exploitable remotely without authentication, it poses a significant risk to affected systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor Palo Alto Networks advisories closely. Since Panorama, Cloud NGFW, and Prisma Access are not impacted, no action is required for those products. For affected PAN-OS firewalls, consider applying any recommended temporary mitigations from Palo Alto Networks once available.