Palo Alto Networks Releases Security Update for PAN-OS

Palo Alto Networks releases security update for PAN-OS to address a high severity vulnerability that could result in a denial-of-service condition

Threat ID:: CC-4737
Threat Severity:: Medium
Published:: 16 January 2026 3:24 PM

Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Palo Alto Networks releases security update for PAN-OS to address a high severity vulnerability that could result in a denial-of-service condition

Affected platforms

The following platforms are known to be affected:

Palo Alto Networks PAN-OS

PAN-OS 10.1

all prior to 10.1.14-h20

PAN-OS 10.2

all prior to 10.2.7-h32
all prior to 10.2.10-h30
all prior to 10.2.13-h18
all prior to 10.2.16-h6
all prior to 10.2.18-h1

PAN-OS 11.1

all prior to 11.1.4-h27
all prior to 11.1.6-h23
all prior to 11.1.10-h9
all prior to 11.1.13

PAN-OS 11.2

all prior to 11.2.4-h15
all prior to 11.2.7-h8
all prior to 11.2.10-h2

Prisma Access 10.2

all prior to 10.2.10-h29

Prisma Access 11.2

all prior to 11.2.7-h8

Notes:

PAN-OS 11.0 - This product has reached end of life (EOL) and will not receive any updates
Cloud NGFW is not affected
This issue is applicable only to PAN-OS NGFW or Prisma Access configurations with an enabled GlobalProtect gateway or portal.

Threat details

Introduction

Palo Alto has released a security update to address a high severity vulnerability in GlobalProtect Gateway and Portal in Palo Alto Networks PAN-OS software. Successful exploitation of this vulnerability could allow an unauthenticated attacker to cause a denial-of-service (DoS) condition to the firewall.

CVE-2026-0227 - Improper Check for Unusual or Exceptional Conditions vulnerability - CVSSv4 base score: 8.7.

Remediation advice

Affected organisations are encouraged to review Palo Alto's CVE-2026-0227 PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and Portal security advisory and apply the relevant update as soon as possible.

Definitive source of threat updates

https://security.paloaltonetworks.com/CVE-2026-0227

CVE Vulnerabilities

Status Published

CVE-2026-0227

A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service (DoS) to the firewall. Repeated attempts to trigger this issue results in the firewall entering into maintenance mode.

Last edited: 16 January 2026 3:24 pm