Log in Start free

Vulnerability · Published Jun 10, 2026 · Assigned by palo_alto

CVE-2026-0269PAN-OS: Denial of Service (DoS) in Tunnel Traffic Processing

Medium 4.6

In plain English

A medium-severity security flaw in Cloud NGFW from Palo Alto Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities).

Severity (CVSS 4.0)4.6Medium
Exploit odds (30 days)0.2%top 86.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A memory corruption vulnerability in the processing of tunnel traffic in Palo Alto Networks PAN-OS® software allows an authenticated user to initiate system reboots using a maliciously crafted packet. Repeated attempts to initiate a reboot causes the firewall to enter maintenance mode. Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.

Affected products (as reported)

VendorProductVersions
Palo Alto Networks Cloud NGFW see references
Palo Alto Networks PAN-OS 12.1.0 – before 12.1.511.2.0 – before 11.2.1011.1.0 – before 11.1.6-h2110.2.0 – before 10.2.16-h6
Palo Alto Networks Panorama see references
Palo Alto Networks Prisma Access see references

Weakness: CWE-754 · Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:A/V:D/RE:M/U:Amber

References