CVE-2026-0317: Cloud NGFW (exact versions not specified); +1 more affected products

Affected technology

Cloud NGFW · Exact affected versions not specified by the source
Palo Alto Networks

PAN-OS · 12.2.0 to before 12.2.4; status changes: 12.2.4 — unaffected, 12.1.0 to before 12.1.10-h2; status changes: 12.1.10-h2 — unaffected, 11.2.0 to before 11.2.16; status changes: 11.2.16 — unaffected, 11.1.0 to before 11.1.16-h3; status changes: 11.1.16-h3 — unaffected
Palo Alto Networks

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · High privileges required · No user interaction required

What an attacker can do

An authenticated user with a read-only administrator role can cause a denial of service (DoS) condition by sending a specially crafted API request. Vendor/CNA’s CVSS 4.0 assessment (base score 1.2/10) rates confidentiality and integrity impact as none; availability impact as low.