What’s Vulnerable › Vulnerabilities

CVE-2026-0321: PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services

• Severity: medium (CVSS 6.6 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-14 · updated 2026-10-15
• Weakness: CWE-754

Description

Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Repeated attempts to trigger this condition result in the firewall entering maintenance mode. Cloud NGFW and Panorama are not affected by this vulnerability.

Affected products

• Palo Alto Networks PAN-OS: from 12.2.0 before 12.2.4; from 12.1.0 before 12.1.10-h2; from 11.2.0 before 11.2.16; from 11.1.0 before 11.1.16-h3; from 10.2.0 before 10.2.18-h12 — fixed in 10.2.18-h12, 11.1.16-h3, 11.2.16, 12.1.10-h2, 12.2.4
• Palo Alto Networks Prisma Access: from 12.1.0 before 12.1.7-h8; from 11.2.0 before 11.2.7-h21; from 10.2.0 before 10.2.10-h41 — fixed in 10.2.10-h41, 11.2.7-h21, 12.1.7-h8

How to fix

Upgrade to a fixed version: Palo Alto Networks PAN-OS 10.2.18-h12, 11.1.16-h3, 11.2.16, 12.1.10-h2; Palo Alto Networks Prisma Access 10.2.10-h41, 11.2.7-h21, 12.1.7-h8. Check the vendor advisory for mitigations.

In the news

• CVE-2026-0321 PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services (Severity: MEDIUM)

References

• https://security.paloaltonetworks.com/CVE-2026-0321

Get alerted when CVE-2026-0321 or the next vulnerability affects your stack