CVE-2026-0317

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2026
Source publication: Oct 14, 2026
Source updated: Oct 15, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

PAN-OS: Denial of Service Vulnerability

A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only administrator role to cause a denial of service (DoS) condition by sending a specially crafted API request. The security risk posed by this issue is significantly minimized by restricting access to the management web interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . Cloud NGFW, Panorama, and Prisma® Access are not affected by this vulnerability.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Cloud NGFW

Vendor: Palo Alto Networks
Product: Cloud NGFW
Platforms: Unknown
Default status: affected

Cloud NGFW · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All	`unaffected`	custom	Unavailable	Unavailable	None listed

PAN-OS

Vendor: Palo Alto Networks
Product: PAN-OS
Platforms: Unknown
Default status: unaffected

PAN-OS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
12.2.0	`affected`	custom	12.2.4	Unavailable	`12.2.4` → `unaffected`
12.1.0	`affected`	custom	12.1.10-h2	Unavailable	`12.1.10-h2` → `unaffected`
11.2.0	`affected`	custom	11.2.16	Unavailable	`11.2.16` → `unaffected`
11.1.0	`affected`	custom	11.1.16-h3	Unavailable	`11.1.16-h3` → `unaffected`

Prisma Access

Vendor: Palo Alto Networks
Product: Prisma Access
Platforms: Unknown
Default status: unknown

Prisma Access · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All	`unaffected`	custom	12.1.7-h8	Unavailable	`12.1.7-h8` → `unaffected`