🔐 CVE Alert

CVE-2026-0317

UNKNOWN 0.0

PAN-OS: Denial of Service Vulnerability

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only administrator role to cause a denial of service (DoS) condition by sending a specially crafted API request. The security risk posed by this issue is significantly minimized by restricting access to the management web interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . Cloud NGFW, Panorama, and Prisma® Access are not affected by this vulnerability.

CWE CWE-754
Vendor palo alto networks
Product cloud ngfw
Published Oct 14, 2026
Stay Ahead of the Next One

Get instant alerts for palo alto networks cloud ngfw

Be the first to know when new unknown vulnerabilities affecting palo alto networks cloud ngfw are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Palo Alto Networks / Cloud NGFW
All versions affected
Palo Alto Networks / PAN-OS
12.2.0 < 12.2.4 12.1.0 < 12.1.10-h2 11.2.0 < 11.2.16 11.1.0 < 11.1.16-h3
Palo Alto Networks / Prisma Access
All versions affected

References

NVD ↗ CVE.org ↗ EPSS Data ↗
security.paloaltonetworks.com: https://security.paloaltonetworks.com/CVE-2026-0317

Credits

Michael Messner and Benedikt Kuehne