CVE-2026-0321

PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services

State: Published
Severity: 6.6 Medium
Published: Oct 14, 2026
Updated: Oct 15, 2026
Reserved: Nov 3, 2025

Description

Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Repeated attempts to trigger this condition result in the firewall entering maintenance mode.

Cloud NGFW and Panorama are not affected by this vulnerability.

Scores

CVSS	Score	Vector	Source
4.0	6.6 Medium	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber	palo_alto

Weaknesses

CWE-754 Improper Check for Unusual or Exceptional Conditions

Affected Products

Product	Versions
Cloud NGFWPalo Alto Networks	AllNot affected
PAN-OSPalo Alto Networks	12.2.0 to before 12.2.4Affectedfrom 12.2.4Not affected 12.1.0 to before 12.1.10-h2Affectedfrom 12.1.10-h2Not affectedfrom 12.1.7-h8Not affectedfrom 12.1.4-h12Not affected 11.2.0 to before 11.2.16Affectedfrom 11.2.16Not affectedfrom 11.2.13-h3Not affectedfrom 11.2.10-h15Not affectedfrom 11.2.7-h21Not affectedfrom 11.2.4-h22Not affected 11.1.0 to before 11.1.16-h3Affectedfrom 11.1.16-h3Not affectedfrom 11.1.13-h15Not affectedfrom 11.1.10-h35Not affectedfrom 11.1.7-h11Not affectedfrom 11.1.6-h39Not affectedfrom 11.1.4-h37Not affected 10.2.0 to before 10.2.18-h12Affectedfrom 10.2.18-h12Not affectedfrom 10.2.16-h11Not affectedfrom 10.2.13-h26Not affectedfrom 10.2.10-h41Not affectedfrom 10.2.7-h38Not affected
Prisma AccessPalo Alto Networks	12.1.0 to before 12.1.7-h8Affectedfrom 12.1.7-h8Not affected 11.2.0 to before 11.2.7-h21Affectedfrom 11.2.7-h21Not affected 10.2.0 to before 10.2.10-h41Affectedfrom 10.2.10-h41Not affected

References

https://security.paloaltonetworks.com/CVE-2026-0321vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.