Product:
PAN-OS
Summary
A denial-of-service vulnerability in the Advanced DNS Security feature of Palo Alto Networks PAN-OS software enables an unauthenticated attacker to initiate system reboots using a maliciously crafted packet. Repeated attempts to initiate a reboot causes the firewall to enter maintenance mode. Cloud NGFW and Prisma Access are not impacted by this vulnerability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.6 | CVE-2026-0229 |
Exploitation
An attacker can exploit this vulnerability by sending specially crafted packets to the affected PAN-OS systems. Since the attack does not require authentication, it can be executed remotely over the network. By continuously sending these malicious packets, the attacker can force the system to reboot repeatedly, leading to a denial-of-service condition.
Affected Products
- PAN-OS: Vulnerable to DoS attacks via crafted packets.
Mitigation
To mitigate this vulnerability, users should ensure that their PAN-OS systems are updated to the latest version provided by Palo Alto Networks. Additionally, implementing network security measures to filter and monitor incoming traffic can help prevent exploitation of this vulnerability.