CVE 4.6 MEDIUM

PAN-OS: Denial of Service (DoS) in Tunnel Traffic Processing_CVE-2026-0269

4.6 / 10
MEDIUM
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:A/V:D/RE:M/U:Amber

Description

A memory corruption vulnerability in the processing of tunnel traffic in Palo Alto Networks PAN-OS® software allows an authenticated user to initiate system reboots using a maliciously crafted packet. Repeated attempts to initiate a reboot causes the firewall to enter maintenance mode.



Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.

Basic Information

ID CVE-2026-0269
Source palo_alto
Published Jun 10, 2026 at 20:54

Affected Product

Vendor Palo Alto Networks
Product Cloud NGFW
Version All
Affected Versions Palo Alto Networks PAN-OS 12.1.0
Palo Alto Networks PAN-OS 11.2.0
Palo Alto Networks PAN-OS 11.1.0
Palo Alto Networks PAN-OS 10.2.0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.