PAN-OS DoS Vulnerability CVE-2026-0269 Advisory and Fix Details

CVE-2026-0269 PAN-OS: Denial of Service (DoS) in Tunnel Traffic Processing Vulnerability Overview Vulnerability ID: CVE-2026-0269 Vulnerability Type: Denial of Service (DoS) Description: A memory corruption vulnerability exists in Palo Alto Networks PAN-OS software during the processing of tunnel traffic, allowing authenticated users to trigger a system reboot using maliciously crafted packets. Repeated reboot attempts can cause the firewall to enter maintenance mode. Severity: Medium (MEDIUM) Urgency: Moderate (MODERATE) Attack Vector: Adjacent (ADJACENT) Attack Complexity: Low (LOW) User Interaction: None (NONE) Privileges Required: Low (LOW) Product Confidentiality: None (NONE) Product Integrity: None (NONE) Product Availability: High (HIGH) Automatable: No (NO) Post-exploitation Confidentiality: None (NONE) Post-exploitation Integrity: None (NONE) Post-exploitation Availability: None (NONE) CVSS Score: 4.6 CWE: CWE-754: Improper Check for Unusual or Exceptional Conditions CAPEC: CAPEC-153 Input Data Manipulation Affected Products Affected Versions: - PAN-OS 12.1: = 12.1.4-h5, >= 12.1.5 - PAN-OS 11.2: >= 11.2.4-h17, >= 11.2.7-h4, >= 11.2.10 - PAN-OS 11.1: >= 11.1.4-h33, >= 11.1.6-h21, >= 11.1.10-h7, >= 11.1.12 - PAN-OS 10.2: >= 10.2.7-h34, >= 10.2.10-h36, >= 10.2.13-h21, >= 10.2.16-h6, >= 10.2.18 - Panorama: All versions - Prisma Access: All versions Required Configuration: - IPsec Tunnels - GlobalProtect Gateways (Remote Access) Remediation PAN-OS 12.1: Upgrade to 12.1.4-h5, 12.1.5, or later PAN-OS 11.2: - Upgrade to 11.2.10 or later - Upgrade to 11.2.7-h4 or later (or 11.2.10 or later) - Upgrade to 11.2.4-h17 or later (or 11.2.10 or later) PAN-OS 11.1: - Upgrade to 11.1.12 or later - Upgrade to 11.1.10-h7 or later (or 11.1.12 or later) - Upgrade to 11.1.6-h21 or later (or 11.1.12 or later) - Upgrade to 11.1.4-h33 or later (or 11.1.12 or later) PAN-OS 10.2: - Upgrade to 10.2.18 or later - Upgrade to 10.2.16-h6 or later (or 10.2.18 or later) - Upgrade to 10.2.13-h21 or later (or 10.2.18 or later) - Upgrade to 10.2.10-h36 or later (or 10.2.18 or later) - Upgrade to 10.2.7-h34 or later (or 10.2.18 or later) All other unsupported PAN-OS versions: Upgrade to a supported, patched version Panorama: No action required Prisma Access: No action required Timeline 2026-06-11: Initial release

Goal Reached Thanks to every supporter — we hit 100%!

PAN-OS DoS Vulnerability CVE-2026-0269 Advisory and Fix Details