CVE-2026-0321 vulnerability in Palo Alto Networks Products
Published on October 14, 2026
PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services
Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Repeated attempts to trigger this condition result in the firewall entering maintenance mode.
Cloud NGFW and Panorama are not affected by this vulnerability.
Vulnerability Analysis
CVE-2026-0321 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.
Timeline
Initial Publication
Weakness Type
Improper Check for Unusual or Exceptional Conditions
The software does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the software.
Products Associated with CVE-2026-0321
stack.watch emails you whenever new vulnerabilities are published in Palo Alto Networks PAN-OS or Palo Alto Networks Prisma Access. Just hit a watch button to start following.
Affected Versions
Palo Alto Networks Cloud NGFW:- Version All is unaffected.
- Version 12.2.0 and below 12.2.4 is affected.
- Version 12.1.0 and below 12.1.10-h2 is affected.
- Version 11.2.0 and below 11.2.16 is affected.
- Version 11.1.0 and below 11.1.16-h3 is affected.
- Version 10.2.0 and below 10.2.18-h12 is affected.
- Version 12.1.0 and below 12.1.7-h8 is affected.
- Version 11.2.0 and below 11.2.7-h21 is affected.
- Version 10.2.0 and below 10.2.10-h41 is affected.