Palo Alto Networks has released crucial patches addressing a high-severity denial-of-service vulnerability, identified as CVE-2026-0227, in its PAN-OS firewalls. This flaw predominantly impacts systems with the GlobalProtect feature enabled. Unauthenticated attackers can exploit this vulnerability to crash the firewalls, forcing them into maintenance mode and leading to potential network outages.
The vulnerability is severe, posing a significant availability risk as it disrupts network functions without compromising security directly. A proof-of-concept exploit for this flaw has been developed, and while no active exploits have been detected thus far, the existence of such code underscores the urgency of applying the provided patches.
A similar vulnerability was previously exploited as a zero-day in 2024, highlighting the need for vigilance and prompt action. Currently, most Prisma Access cloud customers are automatically protected, but users of PAN-OS Next-Generation Firewalls (NGFW) must manually apply the patches according to their specific software version.
Given that there are no available workarounds, immediate patching is critical to ensure the security and availability of affected systems. Users are strongly advised to update their systems promptly to safeguard against potential attacks.

Collections

Palo Alto Networks released patches for CVE-2026-0227, a high-severity denial-of-service vulnerability in PAN-OS firewalls with GlobalProtect enabled. Unauthenticated attackers can exploit this flaw to crash firewalls into maintenance mode, causing network outages. A proof-of-concept exploit exists, though no active exploitation has been detected. Prisma Access cloud customers are automatically protected, but PAN-OS NGFW users must manually apply patches immediately as no workarounds are available.

Palo Alto Networks Patches Critical Denial-of-Service Flaw in GlobalProtect Firewalls