CVE-2016-3656: Palo Alto Networks PAN-OS

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

The GlobalProtect Portal in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5H2 allows remote attackers to cause a denial of service (service crash) via a crafted request.

Affected products

• Palo Alto Networks PAN-OS: from 5.0.0, before 5.0.18 (fixed in 5.0.18); from 5.1, before 5.1.11 (fixed in 5.1.11); from 6.0.0, before 6.0.13 (fixed in 6.0.13); from 6.1.0, before 6.1.10 (fixed in 6.1.10); from 7.0.0, up to and including 7.0.5

Published 2016-04-12. Last modified 2026-06-17.