CVE-2026-0321

Awaiting Analysis Awaiting Analysis - Queue

Denial of Service in Palo Alto PAN-OS Software

Publication date: 2026-10-14

Last updated on: 2026-10-15

Assigner: Palo Alto Networks, Inc.

Description

Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Repeated attempts to trigger this condition result in the firewall entering maintenance mode. Cloud NGFW and Panorama are not affected by this vulnerability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-0321

EUVD

EUVD-2026-101627

Affected Vendors & Products

Vendor	Product	Version / Range
Palo	Alto	Networks PAN-OS 12.2.0
Palo	Alto	Networks PAN-OS 12.1.0
Palo	Alto	Networks PAN-OS 11.2.0
Palo	Alto	Networks PAN-OS 11.1.0
Palo	Alto	Networks PAN-OS 10.2.0
Palo	Alto	Networks Prisma Access 12.1.0
Palo	Alto	Networks Prisma Access 11.2.0
Palo	Alto	Networks Prisma Access 10.2.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-754	The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

Attack-Flow Graph

Executive Summary

CVE-2026-0321 is a medium-severity Denial of Service (DoS) vulnerability in Palo Alto Networks PAN-OS software. An unauthenticated attacker with network access can exploit this by sending specially crafted traffic to or through a dataplane interface, causing a DoS condition. Repeated exploitation attempts may force the firewall into maintenance mode.

Detection Guidance

Monitor for unusual traffic patterns or firewall performance degradation. Check firewall logs for repeated connection attempts or errors. Use network monitoring tools to detect increased latency or dropped connections on dataplane interfaces.

Impact Analysis

This vulnerability allows an attacker to disrupt network operations by causing a DoS condition, leading to downtime and potential loss of access to critical services. Repeated attacks may force the firewall into maintenance mode, requiring manual intervention to restore functionality.

Compliance Impact

This vulnerability could impact compliance with GDPR and HIPAA by disrupting the availability of critical network security infrastructure. A DoS condition may lead to prolonged downtime, potentially causing delays in data processing or access, which could violate availability requirements under these regulations. Organizations relying on affected PAN-OS versions may face compliance risks if the vulnerability is exploited.

Mitigation Strategies

Upgrade PAN-OS to a fixed version as recommended by Palo Alto Networks. Ensure Threat Prevention with SSL Decryption is enabled for limited coverage. Monitor firewall health and prepare for maintenance mode if exploitation is suspected.

Hi! I’m here to help you understand CVE-2026-0321. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70