CVE-2026-0227: Palo Alto Networks PAN-OS

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service (DoS) to the firewall. Repeated attempts to trigger this issue results in the firewall entering into maintenance mode.

Affected products

• Palo Alto Networks PAN-OS: from 10.1.0, before 10.1.14 (fixed in 10.1.14); from 10.2.0, before 10.2.7 (fixed in 10.2.7); from 10.2.8, before 10.2.10 (fixed in 10.2.10); from 10.2.11, before 10.2.13 (fixed in 10.2.13); from 10.2.14, before 10.2.16 (fixed in 10.2.16); from 11.1.0, before 11.1.4 (fixed in 11.1.4); …
• Palo Alto Networks Prisma Access: affected versions not specified

Published 2026-01-15. Last modified 2026-06-17.