Status: UPDATED | Advisory ID: CVE-2026-0262
| CVE | CVE-2026-0262 |
| CVSS Score / Version | 7.5 (High) / CVSS v3.1 |
| Updated | 2026-09-24 |
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| CVSS Prose | attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high. |
| Affected products | Siemens RUGGEDCOM APE1808 Firmware and Palo Alto Networks PAN-OS |
| Classified as | CWE-754 (Improper Check for Unusual or Exceptional Conditions) |
| Exploitation prediction (EPSS) | 0.36% probability of exploitation in the next 30 days (27% percentile) -- FIRST.org's EPSS model. |
| Vendor | Product | Affected Versions | Patch Status |
|---|---|---|---|
| Siemens | RUGGEDCOM APE1808 Firmware | ||
| Palo Alto Networks | PAN-OS |
| Subsystems | PLC/PAC/RTU |
| Sectors | Critical Manufacturing, Energy, Food and Agriculture, Multi-sector, Transportation Systems |
Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic.
Panorama and Cloud NGFW are not impacted by these vulnerabilities.
Monitor Siemens's and Palo Alto Networks's web pages for any future patch releases. See vendor advisory link below.
| Source | Reference |
|---|---|
| NVD | https://nvd.nist.gov/vuln/detail/CVE-2026-0262 |
| CVE | https://www.cve.org/CVERecord?id=CVE-2026-0262 |
| Vendor advisory | https://security.paloaltonetworks.com/CVE-2026-0262 |