PT-2026-7632 · Palo Alto Networks · Cloud Ngfw+2

Jliu · Published 2026-02-11 · Updated 2026-03-20 · CVE-2026-0229

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions (affected versions not specified)

Description A denial-of-service (DoS) condition exists in the Advanced DNS Security (ADNS) feature of Palo Alto Networks PAN-OS software. An unauthenticated attacker can exploit this issue by sending a crafted packet, which can cause system reboots. Repeated attempts to initiate a reboot may lead the firewall to enter maintenance mode, potentially resulting in sustained outages if ADNS spyware profiles are configured to block, sinkhole, or alert. Cloud NGFW and Prisma Access are not impacted.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

BDU:2026-01844

CVE-2026-0229

Affected Products

Cloud Ngfw

Pan-Os

Prisma Access

References · 9

• https://security.paloaltonetworks.com/CVE-2026-0229 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-0229 · Security Note
• https://bdu.fstec.ru/vul/2026-01844 · Security Note
• https://t.me/pentestingnews/73086 · Telegram Post
• https://twitter.com/ThreatSynop/status/2021904755052736852 · Twitter Post
• https://t.me/CVEtracker/44453 · Telegram Post
• https://twitter.com/Karma_X_Inc/status/2022387019570159686 · Twitter Post
• https://twitter.com/vuln_tracker/status/2022197564263789051 · Twitter Post
• https://twitter.com/Komodosec/status/2035117830933553478 · Twitter Post