CVE-2026-0321: PAN-OS 12.2.0 to before 12.2.4; status changes: 12.2.4 — unaffected, 12.1.0 to before 12.1.10-h2; status changes:…

Affected technology

PAN-OS · 12.2.0 to before 12.2.4; status changes: 12.2.4 — unaffected, 12.1.0 to before 12.1.10-h2; status changes: 12.1.10-h2 — unaffected, 12.1.7-h8 — unaffected, 12.1.4-h12 — unaffected, 11.2.0 to before 11.2.16; status changes: 11.2.16 — unaffected, 11.2.13-h3 — unaffected, 11.2.10-h15 — unaffected, 11.2.7-h21 — unaffected, 11.2.4-h22 — unaffected, 11.1.0 to before 11.1.16-h3; status changes: 11.1.16-h3 — unaffected, 11.1.13-h15 — unaffected, 11.1.10-h35 — unaffected, 11.1.7-h11 — unaffected, 11.1.6-h39 — unaffected, 11.1.4-h37 — unaffected, 10.2.0 to before 10.2.18-h12; status changes: 10.2.18-h12 — unaffected, 10.2.16-h11 — unaffected, 10.2.13-h26 — unaffected, 10.2.10-h41 — unaffected, 10.2.7-h38 — unaffected
Palo Alto Networks

Prisma Access · 12.1.0 to before 12.1.7-h8; status changes: 12.1.7-h8 — unaffected, 11.2.0 to before 11.2.7-h21; status changes: 11.2.7-h21 — unaffected, 10.2.0 to before 10.2.10-h41; status changes: 10.2.10-h41 — unaffected
Palo Alto Networks

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

An unauthenticated attacker with network access can cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Vendor/CNA’s CVSS 4.0 assessment (base score 6.6/10) rates confidentiality and integrity impact as none; availability impact as high.