CVE-2026-0227
PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and Portal
At a glance Severity MEDIUM 6.6 EPSS EPSS 0.74 % · percentile 54 (2026-10-27) State PUBLISHED Published 2026-01-15 Updated 2026-01-30 Assigner palo_alto NVD status Analyzed Description A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service (DoS) to the firewall. Repeated attempts to trigger this issue results in the firewall entering into maintenance mode.
Scores Version Score Vector Scored by CVSS 4.0 MEDIUM 6.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:Y/R:U/V:D/RE:M/U:Amber palo_alto CVSS 4.0 MEDIUM 6.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:D/RE:M/U:Amber NVD · psirt@paloaltonetworks.com (Secondary) CVSS 3.1 HIGH 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H NVD · nvd@nist.gov (Primary)
Weaknesses (CWE)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* ≥ 10.1.0 < 10.1.14cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* ≥ 10.2.0 < 10.2.7cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* ≥ 10.2.8 < 10.2.10cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* ≥ 10.2.11 < 10.2.13cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* ≥ 10.2.14 < 10.2.16cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* ≥ 11.1.0 < 11.1.4cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* ≥ 11.1.5 < 11.1.6cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* ≥ 11.1.7 < 11.1.10cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* ≥ 11.1.11 < 11.1.13cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* ≥ 11.2.0 < 11.2.4cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* ≥ 11.2.5 < 11.2.7cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* ≥ 11.2.8 < 11.2.10cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:-:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h10:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h11:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h13:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h14:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h15:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h16:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h19:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h2:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h4:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h6:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h8:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h9:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:-:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h1:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h12:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h16:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h18:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h19:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h21:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h24:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h3:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h6:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h8:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:-:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h10:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h12:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h14:*:*:*:*:*:*+79 more Affected products Product Versions Palo Alto Networks · Cloud NGFW unaffected All Palo Alto Networks · PAN-OS affected 12.1.2 < 12.1.4, 12.1.3-h3 ; affected 11.2.0 < 11.2.10-h2, 11.2.7-h8, 11.2.4-h15 ; affected 11.1.0 < 11.1.13, 11.1.10-h9, 11.1.6-h23, 11.1.4-h27 ; affected 10.2.0 < 10.2.18-h1, 10.2.16-h6, 10.2.13-h18, 10.2.10-h30, 10.2.7-h32 ; affected 10.1.0 < 10.1.14-h20 Palo Alto Networks · Prisma Access affected 11.2 < 11.2.7-h8 ; affected 10.2 < 10.2.10-h29, 10.2.4-h43
References
Sources
