This vulnerability (CVE-2026-0264) involves a heap-based buffer overflow (CWE-122) in the DNS proxy and DNS Server components of Palo Alto Networks PAN-OS software on PA-Series hardware. Exploitation requires network access and no authentication, allowing an attacker to cause denial of service or potentially execute arbitrary code via specially crafted network traffic. The vulnerability does not affect Panorama, Cloud NGFW, or Prisma Access products. The CVSS 4.0 score is 7.2, indicating high severity. No patch or official remediation level has been provided in the available information.

Successful exploitation can lead to denial of service or arbitrary code execution on affected PA-Series hardware running PAN-OS. This could disrupt network security functions or allow attacker control over the device. Cloud NGFW and Prisma Access are explicitly not affected, limiting impact to on-premises PA-Series hardware. No known exploits in the wild have been reported to date.

Patch status is not yet confirmed — check the Palo Alto Networks vendor advisory for current remediation guidance. Since Panorama, Cloud NGFW, and Prisma Access are not impacted, no action is required for those products. For affected PA-Series hardware, monitor vendor communications for patches or official mitigations. Do not assume a fix is available until confirmed by Palo Alto Networks.