This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.
[TLP:CLEAR] Palo Alto PAN-OS fixes a high-severity vulnerability
Palo Alto fixes a high-severity vulnerability in PAN-OS and Prisma Access. Fixed versions by branch [1]: 12.1 PAN-OS: 12.1.3-h3, 12.1.4 11.2 PAN-OS: 11.2.4-h15, 11.2.7-h8, 11.2.10-h2 11.1 PAN-OS: 11.1.4-h27, 11.1.6-h23, 11.1.10-h9, 11.1.13 10.2 PAN-OS: 10.2.7-h32, 10.2.10-h30, 10.2.13-h18, 10.2.16-h6, 10.2.18-h1 10.1 PAN-OS: 10.1.14-h20 Prisma Access (fixed automatically) - 10.2.4-h43, 10.2.10-h29, 11.2.7-h8
An unauthenticated remote attacker can perform a DoS attack on the firewall [1]. The company has confirmed the existence of a PoC.
The vulnerability is present in products:
- PAN-OS; >=10.1.14, <10.1.14-h20; >=10.2.7, <10.2.7-h32; >=10.2.10, <10.2.10-h30; >=10.2.13, <10.2.13-h18; >=10.2.16, <10.2.16-h6; >=10.2.18, <10.2.18-h1; >=11.1.4, <11.1.4-h27; >=11.1.6, <11.1.6-h23; >=11.1.10, <11.1.10-h9; >=11.2.4, <11.2.4-h15; >=11.2.7, <11.2.7-h8; >=11.2.10, <11.2.10-h2; >=12.1.3, <12.1.3-h3;
- Prisma Access; >=10.2.4, <10.2.4-h43; >=10.2.10, <10.2.10-h29; >=11.2.7, <11.2.7-h8;
CVSS: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/AU:Y/R:U/V:D/RE:M/U:Amber
More information:
- CVE-2026-0227 at cve.org, NVD
- CWE-754: Improper Check for Unusual or Exceptional Conditions at cwe.mitre.org
The vulnerability was publicly disclosed 14. 1. 2026.
By CESNET, z.s.p.o. Michaela Ručková on 21. 1. 2026.