Riskcovery

CVE-2026-0227

PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and Portal

State
Published
Severity
6.6 Medium
Published
Jan 15, 2026
Updated
Jan 30, 2026
Reserved
Nov 3, 2025

Read the record on cve.org

Description

A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service (DoS) to the firewall. Repeated attempts to trigger this issue results in the firewall entering into maintenance mode.

Scores

CVSSScoreVectorSource
4.06.6 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:Y/R:U/V:D/RE:M/U:Amberpalo_alto

Weaknesses

  • CWE-754 Improper Check for Unusual or Exceptional Conditions

Affected Products

ProductVersions
Cloud NGFWPalo Alto Networks
  • AllNot affected
PAN-OSPalo Alto Networks
  • 12.1.2 to before 12.1.4, 12.1.3-h3Affectedfrom 12.1.4Not affectedfrom 12.1.3-h3Not affected
  • 11.2.0 to before 11.2.10-h2, 11.2.7-h8, 11.2.4-h15Affectedfrom 11.2.10-h2Not affectedfrom 11.2.7-h8Not affectedfrom 11.2.4-h15Not affected
  • 11.1.0 to before 11.1.13, 11.1.10-h9, 11.1.6-h23, 11.1.4-h27Affectedfrom 11.1.13Not affectedfrom 11.1.10-h9Not affectedfrom 11.1.6-h23Not affectedfrom 11.1.4-h27Not affected
  • 10.2.0 to before 10.2.18-h1, 10.2.16-h6, 10.2.13-h18, 10.2.10-h30, 10.2.7-h32Affectedfrom 10.2.18-h1Not affectedfrom 10.2.16-h6Not affectedfrom 10.2.13-h18Not affectedfrom 10.2.10-h30Not affectedfrom 10.2.7-h32Not affected
  • 10.1.0 to before 10.1.14-h20Affectedfrom 10.1.14-h20Not affected
Prisma AccessPalo Alto Networks
  • 11.2 to before 11.2.7-h8Affectedfrom 11.2.7-h8Not affected
  • 10.2 to before 10.2.10-h29, 10.2.4-h43Affectedfrom 10.2.10-h29Not affectedfrom 10.2.4-h43Not affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.