CVE-2026-0321CWE-754

CVE-2026-0321

published October 15, 2026

CVSS
6.6
EPSS
0%
Percentile
24.4
In the wild
Unconfirmed
What it is

Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Repeated attempts to trigger this condition result in the firewall entering maintenance mode.

Cloud NGFW and Panorama are not affected by this vulnerability.

The record
Technical detail
CVSS
6.6 · NONE
CVSS v4.0
6.6 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
EPSS
0.00326 · 24.4th percentile
Weakness
CWE-754 · Improper Check for Unusual or Exceptional Conditions
Published
2026-10-15T00:17Z
References (1)
https://security.paloaltonetworks.com/CVE-2026-0321 · [email protected]
EPSS history
Timeline
  • 16 OCT 03:27Z
    EPSS moved — → 0%
    epss
  • 14 OCT 19:58Z
    PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services
    cvelistv5
  • 14 OCT 19:58Z
    PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services
    cvelistv5