CVE-2026-0229

published 2026-02-11

CVE-2026-0229: A denial-of-service (DoS) vulnerability in the Advanced DNS Security (ADNS) feature of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker…

Priority P3 44 medium 6.6 CVSS 4.0

AV N AC L AT N PR N UI N VC N VI N VA H SC N SI N SA N E U CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU Y R U V D RE M U Amber

A denial-of-service (DoS) vulnerability in the Advanced DNS Security (ADNS) feature of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to initiate system reboots using a maliciously crafted packet. Repeated attempts to initiate a reboot causes the firewall to enter maintenance mode.

Cloud NGFW and Prisma Access® are not impacted by this vulnerability.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
palo_alto_networks	pan-os	>= 11.2.0 < 11.2.10	11.2.10
palo_alto_networks	pan-os	>= 12.1.0 < 12.1.4	12.1.4
paloalto	cloud_ngfw	—	—
paloalto	pan-os_firewall	—	—
paloalto	panorama	—	—
paloalto	prisma_access	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-754