CVE-2026-0269

Awaiting Analysis Awaiting Analysis - Queue

Memory Corruption in PAN-OS Leading to System Reboot

Publication date: 2026-06-10

Last updated on: 2026-06-10

Assigner: Palo Alto Networks, Inc.

Description

A memory corruption vulnerability in the processing of tunnel traffic in Palo Alto Networks PAN-OS® software allows an authenticated user to initiate system reboots using a maliciously crafted packet. Repeated attempts to initiate a reboot causes the firewall to enter maintenance mode. Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-10

Last Modified

2026-06-10

Generated

2026-07-01

AI Q&A

2026-06-11

EPSS Evaluated

2026-06-30

NVD

CVE-2026-0269

EUVD

EUVD-2026-36145

Affected Vendors & Products

Vendor	Product	Version / Range
palo_alto_networks	pan-os	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-754	The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

Attack-Flow Graph

Executive Summary

This vulnerability is a memory corruption issue in the processing of tunnel traffic within Palo Alto Networks PAN-OS® software. It allows an authenticated user to send a specially crafted packet that can cause the system to reboot.

If an attacker repeatedly exploits this vulnerability, it can cause the firewall to enter maintenance mode, potentially disrupting normal operations.

It is important to note that Panorama, Cloud NGFW, and Prisma® Access are not affected by this vulnerability.

Impact Analysis

The vulnerability can impact you by allowing an authenticated user to cause unexpected system reboots of the firewall.

Repeated exploitation can force the firewall into maintenance mode, which may lead to service interruptions, reduced network security, and potential downtime.

Compliance Impact

The provided information does not specify any direct impact of this vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.

Detection Guidance

There is no specific information provided about detection methods or commands to identify this vulnerability on your network or system.

Mitigation Strategies

To mitigate this vulnerability, you should upgrade your Palo Alto Networks PAN-OS software to a fixed version.

Upgrade to PAN-OS 10.2.18 or later
Upgrade to PAN-OS 11.1.12 or later
Upgrade to PAN-OS 11.2.10 or later
Upgrade to PAN-OS 12.1.5 or later

No workarounds exist for this vulnerability, so upgrading is the recommended immediate action.

Hi! I’m here to help you understand CVE-2026-0269. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70