CVE-2026-0227

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service (DoS) to the firewall. Repeated attempts to trigger this issue results in the firewall entering into maintenance mode.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-754

Affected software

Vendor	Product	Versions
Palo Alto Networks	Cloud NGFW	—
Palo Alto Networks	PAN-OS	>= 12.1.2, < 12.1.4, 12.1.3-h3; >= 11.2.0, < 11.2.10-h2, 11.2.7-h8, 11.2.4-h15; >= 11.1.0, < 11.1.13, 11.1.10-h9, 11.1.6-h23, 11.1.4-h27; >= 10.2.0, < 10.2.18-h1, 10.2.16-h6, 10.2.13-h18, 10.2.10-h30, 10.2.7-h32; >= 10.1.0, < 10.1.14-h20
Palo Alto Networks	Prisma Access	>= 11.2, < 11.2.7-h8; >= 10.2, < 10.2.10-h29, 10.2.4-h43

References

https://security.paloaltonetworks.com/CVE-2026-0227Vendor Advisory

Timeline

Published: Jan 15, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-02281.3An improper certificate validation vulnerability in PAN-OS allows users to connect Terminal Server Agents on Windows to PAN-OS using expired CVE-2026-02296.6A denial-of-service (DoS) vulnerability in the Advanced DNS Security (ADNS) feature of Palo Alto Networks PAN-OS® software enables an unauth CVE-2026-02304.0A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on macOS allows a local administrator to disable the agent.CVE-2026-02315.7An information disclosure vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to obtain and modify sensit CVE-2026-02324.4A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows allows a local Windows administrator to disable CVE-2026-02338.8A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated atta CVE-2026-02349.1An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Mi CVE-2026-02354.7A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to bypass certain access CVE-2026-02367.8A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface CVE-2026-02377.8An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to a CVE-2026-02383.2A vulnerability in Palo Alto Networks Broker VM allows an authenticated administrator to inject arbitrary content into certain Broker VM fie CVE-2026-02396.5An information disclosure vulnerability in the Chronosphere Chronocollector enables an unauthenticated attacker with network access to the c