---
id: CVE-2026-0262
title: 'PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing'
summary: >-
  Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS®
  software allow an unauthenticated attacker with network access to cause a
  denial of service (DoS) condition by sending specially crafted network
  traffic. 


  Panorama…
severity: medium
cvss: 6.6
cvssVector: >-
  CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:C/RE:M/U:Amber
cvssSource: cna
cwe:
  - CWE-754
vendor: Palo Alto Networks
product: Cloud NGFW
affected:
  - cloud_ngfw
  - 'PAN-OS >= 12.1.0 < 12.1.7, 12.1.4-h5'
  - 'PAN-OS >= 11.2.0 < 11.2.12, 11.2.10-h6, 11.2.7-h13, 11.2.4-h17'
  - >-
    PAN-OS >= 11.1.0 < 11.1.15, 11.1.13-h5, 11.1.10-h25, 11.1.7-h6, 11.1.6-h32,
    11.1.4-h33
  - >-
    PAN-OS >= 10.2.0 < 10.2.18-h6, 10.2.16-h7, 10.2.13-h21, 10.2.10-h36,
    10.2.7-h34
  - prisma_access >= 10.2.0 < 10.2.10-h36
  - prisma_access >= 11.2.0 < 11.2.7-h13
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-05-13T18:48:50.434924Z'
published: '2026-05-13'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T01:11:30.419Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-0262'
references:
  - url: 'https://security.paloaltonetworks.com/CVE-2026-0262'
tags:
  - cve.org
epss: 0.00359
epssPercentile: 0.27978
ingestedAt: '2026-10-15T05:52:46.055Z'
---

## Overview

Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic. 

Panorama and Cloud NGFW are not impacted by these vulnerabilities.

## Affected

- `cloud_ngfw`
- `PAN-OS >= 12.1.0 < 12.1.7, 12.1.4-h5`
- `PAN-OS >= 11.2.0 < 11.2.12, 11.2.10-h6, 11.2.7-h13, 11.2.4-h17`
- `PAN-OS >= 11.1.0 < 11.1.15, 11.1.13-h5, 11.1.10-h25, 11.1.7-h6, 11.1.6-h32, 11.1.4-h33`
- `PAN-OS >= 10.2.0 < 10.2.18-h6, 10.2.16-h7, 10.2.13-h21, 10.2.10-h36, 10.2.7-h34`
- `prisma_access >= 10.2.0 < 10.2.10-h36`
- `prisma_access >= 11.2.0 < 11.2.7-h13`

## Remediation

VERSION                                 MINOR VERSION                SUGGESTED SOLUTION
Cloud NGFW                                                           No action needed
PAN-OS 12.1                             12.1.5 through 12.1.6        Upgrade to 12.1.7 or later.
                                        12.1.2 through 12.1.4-h*     Upgrade to 12.1.4-h5 or 12.1.7 or later.
PAN-OS 11.2                             11.2.11 or later             Upgrade to 11.2.12 or later.
                                        11.2.8 through 11.2.10-h*    Upgrade to 11.2.10-h6 or 11.2.12 or later.
                                        11.2.5 through 11.2.7-h*     Upgrade to 11.2.7-h13 or 11.2.12 or later.
                                        11.2.0 through 11.2.4-h*     Upgrade to 11.2.4-h17 or 11.2.12 or later.
PAN-OS 11.1                             11.1.14 or later             Upgrade to 11.1.15 or later.
                                        11.1.11 through 11.1.13-h*   Upgrade to 11.1.13-h5 or 11.1.15 or later.
                                        11.1.8 through 11.1.10-h*    Upgrade to 11.1.10-h25 or 11.1.15 or later.
                                        11.1.7 through 11.1.7-h*     Upgrade to 11.1.7-h6 or 11.1.15 or later.
                                        11.1.5 through 11.1.6-h*     Upgrade to 11.1.6-h32 or 11.1.15 or later.
                                        11.1.0 through 11.1.4-h*     Upgrade to 11.1.4-h33 or 11.1.15 or later.
PAN-OS 10.2                             10.2.17 through 10.2.18-h*   Upgrade to 10.2.18-h6 or later.
                                        10.2.14 through 10.2.16-h*   Upgrade to 10.2.16-h7 or 10.2.18-h6 or later.
                                        10.2.11 through 10.2.13-h*   Upgrade to 10.2.13-h21 or 10.2.18-h6 or later.
                                        10.2.8 through 10.2.10-h*    Upgrade to 10.2.10-h36 or 10.2.18-h6 or later.
                                        10.2.0 through 10.2.7-h*     Upgrade to 10.2.7-h34 or 10.2.18-h6 or later.
Prisma Access 10.2                      10.2.0 through 10.2.10-h*    Upgrade to 10.2.10-h36 or later.
Prisma Access 11.2                      11.2.0 through 11.2.7-h*      Upgrade to 11.2.7-h13 or later.
All older unsupported PAN-OS versions                                Upgrade to a supported fixed version.

### Workarounds

Customers with a Threat Prevention subscription can block attacks for this vulnerability by enabling Threat IDs 510011, 510015, 510022 (HTTP traffic only), and 510023 (from Applications and Threats content version 9100-10044 and later).

Please note that all of the above Threat IDs require SSL Decryption.