CVE-2026-0287 PUBLISHED

PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing

Assigner: palo_alto
Reserved: 03.11.2025 Published: 09.07.2026 Updated: 09.07.2026

Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Repeated attempts to trigger this condition result in the firewall entering maintenance mode.

Panorama is not impacted by these vulnerabilities.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:C/RE:M/U:Amber
CVSS Score: 6.6
CVSS Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:C/RE:M/U:Amber
CVSS Score: 4.6

The risk of exploitation is lower for Prisma Access as it requires an authenticated user and the external network access to the dataplane interface is restricted.

Product Status

Vendor Palo Alto Networks
Product Cloud NGFW
Versions Default: affected
  • Version All is affected
Vendor Palo Alto Networks
Product PAN-OS
Versions Default: unaffected
  • affected from 12.1.0 to 12.1.4-h8 (excl.)
  • affected from 11.2.0 to 11.2.4-h20 (excl.)
  • affected from 11.1.0 to 11.1.4-h35 (excl.)
  • affected from 10.2.0 to 10.2.7-h36 (excl.)
Vendor Palo Alto Networks
Product Prisma Access
Versions Default: unaffected
  • affected from 11.2.0 to 11.2.7-h18 (excl.)
  • affected from 10.2.0 to 10.2.10-h39 (excl.)

Exploits

Palo Alto Networks is not aware of any malicious exploitation of this issue.

Credits

  • our internal security research teams finder

References

Problem Types

  • CWE-754 Improper Check for Unusual or Exceptional Conditions CWE

Impacts

  • CAPEC-153 Input Data Manipulation