CVE-2026-0310: PAN-OS Buffer Overflow Can Enable Root RCE on PA-Series Firewalls

Palo Alto Networks disclosed CVE-2026-0310, a CWE-787 out-of-bounds write in PAN-OS XML processing that allows unauthenticated network access to cause DoS on VM-Series and arbitrary code execution with root privileges on PA-Series hardware; multiple PAN-OS branches, Panorama, Prisma Access, and Cloud NGFW are affected and vendor-provided fixed builds are listed. The advisory urges immediate patching (no workaround exists), recommends restricting management interfaces to trusted addresses or a jump box, offers detection and mitigation guidance, and states there was no known malicious exploitation at the time of disclosure.