The security risk posed by this issue is significantly minimized by restricting access to the management web interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .
Cloud NGFW, Panorama, and Prisma® Access are not affected by this vulnerability.
Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Palo Alto Networks | Cloud NGFW | affected |
|
|||||||||||||||
| Palo Alto Networks | PAN-OS | unaffected |
|
|||||||||||||||
| Palo Alto Networks | Prisma Access | unknown |
|
No data.
No data.
No data available yet.
Vendor Solution
VersionMinor Version RangeSuggested SolutionCloud NGFW No action required. PAN-OS 12.112.2.0 through 12.2.3-h*Upgrade to 12.2.4 or later. PAN-OS 12.112.1.2 through 12.1.10-h*Upgrade to 12.1.10-h2 or later.PAN-OS 11.211.2.0 through 11.2.15-h*Upgrade to 11.2.16 or later.PAN-OS 11.111.1.0 through 11.1.16-h*Upgrade to 11.1.16-h3 or later.All other older unsupported PAN-OS versions Upgrade to a supported fixed version. Prisma Access No action needed.
Vendor Workaround
No known workarounds exist for this issue.
Tracking
Sign in to view the affected projects.
No advisories yet.
| Link | Providers |
|---|---|
| https://security.paloaltonetworks.com/CVE-2026-0317 |
|
Wed, 14 Oct 2026 20:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only administrator role to cause a denial of service (DoS) condition by sending a specially crafted API request. The security risk posed by this issue is significantly minimized by restricting access to the management web interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . Cloud NGFW, Panorama, and Prisma® Access are not affected by this vulnerability. | |
| Title | PAN-OS: Denial of Service Vulnerability | |
| First Time appeared |
Palo Alto Networks
Palo Alto Networks pan-os |
|
| Weaknesses | CWE-754 | |
| CPEs | cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:* |
|
| Vendors & Products |
Palo Alto Networks
Palo Alto Networks pan-os |
|
| References |
| |
| Metrics |
cvssV4_0
|
MITRE
Status: PUBLISHED
Assigner: palo_alto
Published:
Updated: 2026-10-14T20:21:21.338Z
Reserved: 2025-11-03T20:45:15.561Z
Link: CVE-2026-0317
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-10-14T21:17:18.940
Modified: 2026-10-14T21:17:18.940
Link: CVE-2026-0317
Redhat
No data.
OpenCVE Enrichment
No data.