What’s Vulnerable › Vulnerabilities

CVE-2026-0262: PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-13 · updated 2026-10-26
• Weakness: CWE-754

Description

Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic. Panorama and Cloud NGFW are not impacted by these vulnerabilities.

Affected products

• Palo Alto Networks PAN-OS: before 10.2.7; from 10.2.8 before 10.2.10; from 10.2.11 before 10.2.13; from 10.2.14 before 10.2.16; from 11.1.0 before 11.1.4; from 11.1.5 before 11.1.6 — fixed in 10.2.7, 10.2.10, 10.2.13, 10.2.16, 11.1.4, 11.1.6
• Siemens Ruggedcom Ape1808 Firmware: all versions

How to fix

Upgrade to a fixed version: Palo Alto Networks PAN-OS 10.2.7, 10.2.10, 10.2.13, 10.2.16. Check the vendor advisory for mitigations.

References

• https://security.paloaltonetworks.com/CVE-2026-0262
• https://cert-portal.siemens.com/productcert/html/ssa-967325.html

Get alerted when CVE-2026-0262 or the next vulnerability affects your stack