Description
A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service (DoS) to the firewall. Repeated attempts to trigger this issue results in the firewall entering into maintenance mode.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Palo Alto Networks | Cloud NGFW | — | All |
| Palo Alto Networks | PAN-OS | 12.1.2 – < 12.1.4, 12.1.3-h3, 11.2.0 – < 11.2.10-h2, 11.2.7-h8, 11.2.4-h15, 11.1.0 – < 11.1.13, 11.1.10-h9, 11.1.6-h23, 11.1.4-h27, 10.2.0 – < 10.2.18-h1, 10.2.16-h6, 10.2.13-h18, 10.2.10-h30, 10.2.7-h32, 10.1.0 – < 10.1.14-h20 | 12.1.4, 12.1.3-h3 |
| Palo Alto Networks | Prisma Access | 11.2 – < 11.2.7-h8, 10.2 – < 10.2.10-h29, 10.2.4-h43 | 11.2.7-h8 |
Advisories 4
- ICSA-25-162-02 Siemens RUGGEDCOM APE1808 CISA ICS & IT advisories · Mar 12, 2026
- SSA-513708 SSA-513708: Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Devices Siemens ProductCERT · Mar 10, 2026
- NCSC-2026-0035 Kwetsbaarheid verholpen in Palo Alto Networks PAN-OS NCSC-NL (Netherlands) · Jan 22, 2026
- WID-SEC-2026-0112 Palo Alto Networks PAN-OS: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Jan 15, 2026
References
- https://security.paloaltonetworks.com/CVE-2026-0227 vendor-advisory