CVE-2026-0229CWE-754

PAN-OS: Denial of Service in Advanced DNS Security Feature

Medium · published February 11, 2026

CVSS v4.0
6.6
EPSS
1%
Percentile
47.1
In the wild
Unconfirmed
What it is

A denial-of-service (DoS) vulnerability in the Advanced DNS Security (ADNS) feature of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to initiate system reboots using a maliciously crafted packet. Repeated attempts to initiate a reboot causes the firewall to enter maintenance mode.

Cloud NGFW and Prisma Access® are not impacted by this vulnerability.

The record
Technical detail
CVSS v4.0
6.6 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:Y/R:U/V:D/RE:M/U:Amber
EPSS
0.00582 · 47.1th percentile
Weakness
CWE-754 · Improper Check for Unusual or Exceptional Conditions
Published
2026-02-11T17:56Z
EPSS history
Timeline
  • 11 FEB 17:56Z
    PAN-OS: Denial of Service in Advanced DNS Security Feature
    cvelistv5