PAN-OS: Denial of Service (DoS) in GlobalProtect
- Severity
- High7.5CVSS 3.1, High
- Known exploited
- Not listed
- Exploit prediction
- 0.41%
- Published
- 12 Mar 2025Updated 17 Jun 2026 · Last verified 29 Sept 2026
Known remediation
Fixed releases per branch, as the vendor states them. Patcharo never infers a fix.
Palo Alto Networks PAN-OS
Vendor advisory- 11.011.0.2
- 10.210.2.5
- 10.110.1.14-h11
Workaround / Vendor remediation
Workaround · PAN-OS
No workaround or mitigation is available.
Vendor remediation · PAN-OS
Version Minor Version Suggested Solution PAN-OS 11.011.0.0 through 11.0.1Upgrade to 11.0.2 or laterPAN-OS 10.210.2.0 through 10.2.4 Upgrade to 10.2.5 or laterPAN-OS 10.1 10.1.0 through 10.1.14 Upgrade to 10.1.14-h11 or later All other older unsupported PAN-OS versions Upgrade to a supported fixed version.
Description
Title, description and vendor guidance are quoted from the source records.
A Denial of Service (DoS) vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software enables an unauthenticated attacker to render the service unavailable by sending a large number of specially crafted packets over a period of time. This issue affects both the GlobalProtect portal and the GlobalProtect gateway. This issue does not apply to Cloud NGFWs or Prisma Access software.
Weakness: CWE-400
Known exploited
Not listed in CISA KEV as of the last check.
Exploit prediction
0.41% probability of exploitation in the next 30 days (percentile 32%).
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
What the source states, per branch
Versions matched by Patcharo
Palo Alto Networks PAN-OSSource: Palo Alto Networks (CVE record)
| Branch | Affected | Fixed in |
|---|---|---|
| 11.0 | >= 11.0.0, < 11.0.2 | 11.0.2 |
| 10.2 | >= 10.2.0, < 10.2.5 | 10.2.5 |
| 10.1 | >= 10.1.0, < 10.1.14-h11 | 10.1.14-h11 |
Versions not listed are stated unaffected by the vendor.
References
Provenance
Every fact on this page comes from the sources below. Nothing is written by an AI.
- Palo Alto Networks (CVE record)
- Palo Alto Networks (CVE record) · 29 Sept 2026 at 00:05 UTC · Parser patcharo-cve5/1.1.0
- NVD
- NVD · 27 Sept 2026 at 23:44 UTC · Parser patcharo-nvd/1.0.0
- FIRST EPSS
- FIRST EPSS · 30 Sept 2026 at 00:17 UTC · Parser patcharo-epss/1.0.0
Last verified: 29 Sept 2026 at 00:05 UTC