CVE-2026-0269

EUVD-2026-36145
A memory corruption vulnerability in the processing of tunnel traffic in Palo Alto Networks PAN-OS® software allows an authenticated user to initiate system reboots using a maliciously crafted packet. Repeated attempts to initiate a reboot causes the firewall to enter maintenance mode.



Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.7 MEDIUM
ADJACENT_NETWORK
LOW
LOW
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 13%
Affected Products (NVD)
VendorProductVersion
paloaltonetworkspan-os
10.2.0 ≤
𝑥
< 10.2.7
paloaltonetworkspan-os
10.2.8 ≤
𝑥
< 10.2.10
paloaltonetworkspan-os
10.2.11 ≤
𝑥
< 10.2.13
paloaltonetworkspan-os
10.2.14 ≤
𝑥
< 10.2.16
paloaltonetworkspan-os
10.2.7
paloaltonetworkspan-os
10.2.7:h1
paloaltonetworkspan-os
10.2.7:h10
paloaltonetworkspan-os
10.2.7:h11
paloaltonetworkspan-os
10.2.7:h12
paloaltonetworkspan-os
10.2.7:h13
paloaltonetworkspan-os
10.2.7:h14
paloaltonetworkspan-os
10.2.7:h15
paloaltonetworkspan-os
10.2.7:h16
paloaltonetworkspan-os
10.2.7:h17
paloaltonetworkspan-os
10.2.7:h18
paloaltonetworkspan-os
10.2.7:h19
paloaltonetworkspan-os
10.2.7:h2
paloaltonetworkspan-os
10.2.7:h20
paloaltonetworkspan-os
10.2.7:h21
paloaltonetworkspan-os
10.2.7:h22
paloaltonetworkspan-os
10.2.7:h23
paloaltonetworkspan-os
10.2.7:h24
paloaltonetworkspan-os
10.2.7:h3
paloaltonetworkspan-os
10.2.7:h32
paloaltonetworkspan-os
10.2.7:h34
paloaltonetworkspan-os
10.2.7:h35
paloaltonetworkspan-os
10.2.7:h4
paloaltonetworkspan-os
10.2.7:h5
paloaltonetworkspan-os
10.2.7:h6
paloaltonetworkspan-os
10.2.7:h7
paloaltonetworkspan-os
10.2.7:h8
paloaltonetworkspan-os
10.2.7:h9
paloaltonetworkspan-os
10.2.10
paloaltonetworkspan-os
10.2.10:h1
paloaltonetworkspan-os
10.2.10:h10
paloaltonetworkspan-os
10.2.10:h11
paloaltonetworkspan-os
10.2.10:h12
paloaltonetworkspan-os
10.2.10:h13
paloaltonetworkspan-os
10.2.10:h14
paloaltonetworkspan-os
10.2.10:h17
paloaltonetworkspan-os
10.2.10:h18
paloaltonetworkspan-os
10.2.10:h2
paloaltonetworkspan-os
10.2.10:h21
paloaltonetworkspan-os
10.2.10:h27
paloaltonetworkspan-os
10.2.10:h3
paloaltonetworkspan-os
10.2.10:h30
paloaltonetworkspan-os
10.2.10:h31
paloaltonetworkspan-os
10.2.10:h4
paloaltonetworkspan-os
10.2.10:h5
paloaltonetworkspan-os
10.2.10:h6
paloaltonetworkspan-os
10.2.10:h7
paloaltonetworkspan-os
10.2.13
paloaltonetworkspan-os
10.2.13:h1
paloaltonetworkspan-os
10.2.13:h10
paloaltonetworkspan-os
10.2.13:h15
paloaltonetworkspan-os
10.2.13:h16
paloaltonetworkspan-os
10.2.13:h18
paloaltonetworkspan-os
10.2.13:h2
paloaltonetworkspan-os
10.2.13:h3
paloaltonetworkspan-os
10.2.13:h4
paloaltonetworkspan-os
10.2.13:h5
paloaltonetworkspan-os
10.2.13:h7
paloaltonetworkspan-os
10.2.16
paloaltonetworkspan-os
10.2.16:h1
paloaltonetworkspan-os
10.2.16:h4
paloaltonetworkspan-os
10.2.17
paloaltonetworkspan-os
11.1.0 ≤
𝑥
< 11.1.4
paloaltonetworkspan-os
11.1.5 ≤
𝑥
< 11.1.6
paloaltonetworkspan-os
11.1.7 ≤
𝑥
< 11.1.10
paloaltonetworkspan-os
11.1.4
paloaltonetworkspan-os
11.1.4:h1
paloaltonetworkspan-os
11.1.4:h10
paloaltonetworkspan-os
11.1.4:h11
paloaltonetworkspan-os
11.1.4:h12
paloaltonetworkspan-os
11.1.4:h13
paloaltonetworkspan-os
11.1.4:h15
paloaltonetworkspan-os
11.1.4:h17
paloaltonetworkspan-os
11.1.4:h18
paloaltonetworkspan-os
11.1.4:h2
paloaltonetworkspan-os
11.1.4:h25
paloaltonetworkspan-os
11.1.4:h27
paloaltonetworkspan-os
11.1.4:h3
paloaltonetworkspan-os
11.1.4:h32
paloaltonetworkspan-os
11.1.4:h4
paloaltonetworkspan-os
11.1.4:h5
paloaltonetworkspan-os
11.1.4:h6
paloaltonetworkspan-os
11.1.4:h7
paloaltonetworkspan-os
11.1.4:h8
paloaltonetworkspan-os
11.1.4:h9
paloaltonetworkspan-os
11.1.6
paloaltonetworkspan-os
11.1.6:h1
paloaltonetworkspan-os
11.1.6:h10
paloaltonetworkspan-os
11.1.6:h14
paloaltonetworkspan-os
11.1.6:h17
paloaltonetworkspan-os
11.1.6:h18
paloaltonetworkspan-os
11.1.6:h19
paloaltonetworkspan-os
11.1.6:h2
paloaltonetworkspan-os
11.1.6:h20
paloaltonetworkspan-os
11.1.6:h3
paloaltonetworkspan-os
11.1.6:h4
paloaltonetworkspan-os
11.1.6:h6
paloaltonetworkspan-os
11.1.6:h7
paloaltonetworkspan-os
11.1.10
paloaltonetworkspan-os
11.1.10:h1
paloaltonetworkspan-os
11.1.10:h4
paloaltonetworkspan-os
11.1.10:h5
paloaltonetworkspan-os
11.1.11
paloaltonetworkspan-os
11.2.0 ≤
𝑥
< 11.2.4
paloaltonetworkspan-os
11.2.5 ≤
𝑥
< 11.2.7
paloaltonetworkspan-os
11.2.8 ≤
𝑥
< 11.2.10
paloaltonetworkspan-os
11.2.4
paloaltonetworkspan-os
11.2.4:h1
paloaltonetworkspan-os
11.2.4:h10
paloaltonetworkspan-os
11.2.4:h11
paloaltonetworkspan-os
11.2.4:h12
paloaltonetworkspan-os
11.2.4:h14
paloaltonetworkspan-os
11.2.4:h15
paloaltonetworkspan-os
11.2.4:h17
paloaltonetworkspan-os
11.2.4:h2
paloaltonetworkspan-os
11.2.4:h3
paloaltonetworkspan-os
11.2.4:h4
paloaltonetworkspan-os
11.2.4:h5
paloaltonetworkspan-os
11.2.4:h6
paloaltonetworkspan-os
11.2.4:h7
paloaltonetworkspan-os
11.2.4:h8
paloaltonetworkspan-os
11.2.4:h9
paloaltonetworkspan-os
11.2.7
paloaltonetworkspan-os
11.2.7:h1
paloaltonetworkspan-os
11.2.7:h2
paloaltonetworkspan-os
11.2.7:h3
paloaltonetworkspan-os
12.1.0 ≤
𝑥
< 12.1.4
paloaltonetworkspan-os
12.1.4
paloaltonetworkspan-os
12.1.4:h2
paloaltonetworkspan-os
12.1.4:h3
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
SiemensRUGGEDCOM APE1808
𝑥
< *
ADP