Rapid7

vulnerability

Palo Alto Networks PAN-OS: CVE-2026-0269: PAN-OS: Denial of Service (DoS) in Tunnel Traffic Processing

Severity
6
CVSS
(AV:A/AC:L/Au:S/C:N/I:N/A:C)
Published
Jun 10, 2026
Added
Jun 11, 2026
Modified
Jun 15, 2026

Description

A memory corruption vulnerability in the processing of tunnel traffic in Palo Alto Networks PAN-OS® software allows an authenticated user to initiate system reboots using a maliciously crafted packet. Repeated attempts to initiate a reboot causes the firewall to enter maintenance mode.

Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.

Solution

palo-alto-networks-pan-os-upgrade-latest
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.