CVE-2026-0227
PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and Portal
Description
A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service (DoS) to the firewall. Repeated attempts to trigger this issue results in the firewall entering into maintenance mode.
Weakness: CWE-754
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Palo Alto Networks | Cloud NGFW | Firewall / NGFW | cna-assigner |
| Palo Alto Networks | PAN-OS | Firewall / NGFW | cna-assigner |
| Palo Alto Networks | Prisma Access | SASE / SSE / Secure Web | cna-assigner |
Vendor-reported affected versions (3)
- Palo Alto Networks · Cloud NGFW
- Palo Alto Networks · PAN-OS
- Palo Alto Networks · Prisma Access
Credit
an external reporter
Vendor remediation
VERSION MINOR VERSION SUGGESTED SOLUTION Cloud NGFW All No action needed. PAN-OS 12.1 12.1.2 through 12.1.3 Upgrade to 12.1.4 or later. PAN-OS 11.2 11.2.8 through 11.2.10 Upgrade to 11.2.10-h2 or later. 11.2.5 through 11.2.7 Upgrade to 11.2.7-h8 or 11.2.10-h2 or later. 11.2.0 through 11.2.4 Upgrade to 11.2.4-h15 or 11.2.10-h2 or later. PAN-OS 11.1 11.1.11 through 11.1.12 Upgrade to 11.1.13 or later. 11.1.7 through 11.1.10 Upgrade to 11.1.10-h9 or 11.1.13 later. 11.1.5 through 11.1.6 Upgrade to 11.1.6-h23 or 11.1.13 or later. 11.1.0 through 11.1.4 Upgrade to 11.1.4-h27 or 11.1.13 or later. PAN-OS 10.2 10.2.17 through 10.2.18 Upgrade to 10.2.18-h1 or later. 10.2.14 through 10.2.16 Upgrade to 10.2.16-h6 or 10.2.18-h1 or later. 10.2.11 through 10.2.13 Upgrade to 10.2.13-h18 or 10.2.18-h1 or later. 10.2.8 through 10.2.10 Upgrade to 10.2.10-h30 or 10.2.18-h1 or later. 10.2.0 through 10.2.7 Upgrade to 10.2.7-h32 or 10.2.18-h1 or later. PAN-OS 10.1 10.1.0 through 10.1.14 Upgrade to 10.1.14-h20 or later. All older Upgrade to a supported fixed version. unsupported PAN-OS versions Prisma Access 11.2 11.2.0 through 11.2.7 Upgrade to 11.2.7-h8 or later.* Prisma Access 10.2 10.2.0 through 10.2.10 Upgrade to 10.2.10-h29 or later.* * See the note under Product Status for information regarding Prisma Access upgrades.