CVE-2026-0287CWE-754

CVE-2026-0287

High · published July 9, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
49.1
In the wild
Unconfirmed
What it is

Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Repeated attempts to trigger this condition result in the firewall entering maintenance mode.

Panorama is not impacted by these vulnerabilities.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00621 · 49.1th percentile
Weakness
CWE-754 · Improper Check for Unusual or Exceptional Conditions
Published
2026-07-09T23:17Z
Affected products (205)
ProductVersionsFixed in
paloaltonetworks/cloud_ngfwall versions—
paloaltonetworks/cloud_ngfwall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-os≥ 10.2.0, < 10.2.710.2.7
paloaltonetworks/pan-os≥ 10.2.8, < 10.2.1010.2.10
paloaltonetworks/pan-os≥ 10.2.11, < 10.2.1310.2.13
paloaltonetworks/pan-os≥ 10.2.14, < 10.2.1610.2.16
paloaltonetworks/pan-os≥ 11.1.0, < 11.1.411.1.4
paloaltonetworks/pan-os≥ 11.1.8, < 11.1.1011.1.10
paloaltonetworks/pan-os≥ 11.1.11, < 11.1.1311.1.13
paloaltonetworks/pan-os≥ 11.1.14, < 11.1.1611.1.16
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-os≥ 11.2.0, < 11.2.411.2.4
paloaltonetworks/pan-os≥ 11.2.5, < 11.2.711.2.7
paloaltonetworks/pan-os≥ 11.2.8, < 11.2.1011.2.10
paloaltonetworks/pan-os≥ 11.2.11, < 11.2.1311.2.13
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-os≥ 12.1.2, < 12.1.412.1.4
paloaltonetworks/pan-os≥ 12.1.5, < 12.1.712.1.7
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
paloaltonetworks/pan-osall versions—
References (2)
EPSS history
Timeline
  • 09 JUL 18:51Z
    PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing
    cvelistv5