Skip to content
CVE PROGRAM SOURCE RECORD6.6 Medium

CVE-2026-0287

PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing

Description

Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Repeated attempts to trigger this condition result in the firewall entering maintenance mode. Panorama is not impacted by these vulnerabilities.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks Cloud NGFW

Default version status: affected

  • Allaffected

Palo Alto Networks PAN-OS

Default version status: unaffected

  • 12.1.0 to < 12.1.4-h8affected
  • 11.2.0 to < 11.2.4-h20affected
  • 11.1.0 to < 11.1.4-h35affected
  • 10.2.0 to < 10.2.7-h36affected

Palo Alto Networks Prisma Access

Default version status: unaffected

  • 11.2.0 to < 11.2.7-h18affected
  • 10.2.0 to < 10.2.10-h39affected

References