CVE-2026-0287— PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing
Possible ATT&CK Techniques 1AI
T1499 · Endpoint Denial of ServiceAffected Version Matrix 7
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Palo Alto Networks | Cloud NGFW | All | affected |
| Palo Alto Networks | PAN-OS | 12.1.0< 12.1.4-h8 | affected |
11.2.0< 11.2.4-h20 | affected | ||
11.1.0< 11.1.4-h35 | affected | ||
10.2.0< 10.2.7-h36 | affected | ||
| Palo Alto Networks | Prisma Access | 11.2.0< 11.2.7-h18 | affected |
10.2.0< 10.2.10-h39 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-0287
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing
Source: CVE Program / CVE List V5
Vulnerability Description
Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Repeated attempts to trigger this condition result in the firewall entering maintenance mode. Panorama is not impacted by these vulnerabilities.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:C/RE:M/U:Amber
Source: CVE Program / CVE List V5
Vulnerability Type
对因果或异常条件的不恰当检查
Source: CVE Program / CVE List V5
Vulnerability Title
Palo Alto Networks Cloud NGFW 异常处理不当漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Palo Alto Networks Cloud NGFW是美国Palo Alto Networks公司的防火墙。 Palo Alto Networks Cloud NGFW存在异常处理不当漏洞，该漏洞源于异常处理不当，可能导致未经身份验证的攻击者通过网络访问，通过发送特制网络流量到或通过数据平面接口引起拒绝服务条件，重复尝试触发此条件会导致防火墙进入维护模式。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Palo Alto Networks | Cloud NGFW | All | - | |
| Palo Alto Networks | PAN-OS | 12.1.0 ~ 12.1.4-h8 | cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:*:* | |
| Palo Alto Networks | Prisma Access | 11.2.0 ~ 11.2.7-h18 | - |
II. Public POCs for CVE-2026-0287
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-0287
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-0287 (1)
Same Patch Batch · Palo Alto Networks · 2026-07-09 · 13 CVEs total
| CVE-2026-0275 | Prisma Browser: Local Privilege Escalation on macOS | |
| CVE-2026-0276 | Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability | |
| CVE-2026-0277 | Prisma Access Agent: Improper Certificate Validation on iOS | |
| CVE-2026-0278 | Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on Windows | |
| CVE-2026-0279 | PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities | |
| CVE-2026-0280 | PAN-OS: IPv6 Firewall Policy Bypass | |
| CVE-2026-0281 | PAN-OS: Information Disclosure Vulnerability in Management Web Interface | |
| CVE-2026-0282 | PAN-OS: File Deletion Vulnerability in Management Web Interface | |
| CVE-2026-0283 | PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN) | |
| CVE-2026-0284 | PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN) | |
| CVE-2026-0285 | PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface | |
| CVE-2026-0286 | PAN-OS: Authenticated Command Injection in CLI |
IV. Related Vulnerabilities
Same product: Cloud NGFW
- CVE-2026-0279
PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities - CVE-2026-0280
PAN-OS: IPv6 Firewall Policy Bypass - CVE-2026-0281
PAN-OS: Information Disclosure Vulnerability in Management W - CVE-2026-0282
PAN-OS: File Deletion Vulnerability in Management Web Interf - CVE-2026-0283
PAN-OS: Authentication Bypass Vulnerability in Large Scale V
Same vendor: Palo Alto Networks
- CVE-2026-0275
Prisma Browser: Local Privilege Escalation on macOS - CVE-2026-0276
Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerabilit - CVE-2026-0277
Prisma Access Agent: Improper Certificate Validation on iOS - CVE-2026-0278
Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilit - CVE-2026-0279
PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities
Same weakness: CWE-754
- CVE-2026-65904
DOMPurify through 3.3.3 Cross-Site Scripting via IN_PLACE mo - CVE-2026-44621
Libunbound applications configured with 'unwanted-reply-thre - CVE-2026-63754
SurrealDB before 3.1.0 Denial of Service via LIVE Query - CVE-2026-21764
Insufficient Input Validation in DevOps Loop - CVE-2026-8075
Posting a malicious markdown image crashes the Mattermost De
V. Comments for CVE-2026-0287
No comments yet