CVE-2026-0229

PAN-OS: Denial of Service in Advanced DNS Security Feature

State: Published
Severity: 6.6 Medium
Published: Feb 11, 2026
Updated: Feb 11, 2026
Reserved: Nov 3, 2025

Description

A denial-of-service (DoS) vulnerability in the Advanced DNS Security (ADNS) feature of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to initiate system reboots using a maliciously crafted packet. Repeated attempts to initiate a reboot causes the firewall to enter maintenance mode.

Cloud NGFW and Prisma Access® are not impacted by this vulnerability.

Scores

CVSS	Score	Vector	Source
4.0	6.6 Medium	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:Y/R:U/V:D/RE:M/U:Amber	palo_alto

Weaknesses

CWE-754 Improper Check for Unusual or Exceptional Conditions

Affected Products

Product	Versions
Cloud NGFWPalo Alto Networks	AllNot affected
PAN-OSPalo Alto Networks	12.1.0 to before 12.1.4Affectedfrom 12.1.4Not affected 11.2.0 to before 11.2.10Affectedfrom 11.2.10Not affected 11.1.0 to before 11.1.11Not affectedfrom 11.1.11Not affected 10.2.0 to before 10.2.17Not affectedfrom 10.2.17Not affected
Prisma AccessPalo Alto Networks	All to before 10.2.10-h28Not affectedfrom 11.2.7-h10Not affectedfrom 10.2.10-h28Not affected

References

https://security.paloaltonetworks.com/CVE-2026-0229vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.