Status: UPDATED | Advisory ID: CVE-2026-0287
| CVE | CVE-2026-0287 |
| CVSS Score / Version | 7.5 (High) / CVSS v3.1 |
| Updated | 2026-08-11 |
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| CVSS Prose | attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high. |
| Affected products | Palo Alto Networks Cloud NGFW, Palo Alto Networks Prisma Access, Palo Alto Networks PAN-OS, and Siemens RUGGEDCOM APE1808 |
| Classified as | CWE-754 (Improper Check for Unusual or Exceptional Conditions) |
| Vendor | Product | Affected Versions | Patch Status |
|---|---|---|---|
| Palo Alto Networks | Cloud NGFW | ||
| Palo Alto Networks | Prisma Access | ||
| Palo Alto Networks | PAN-OS | ||
| Siemens | RUGGEDCOM APE1808 |
| Subsystems | General OT |
| Sectors | Multi-sector |
Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Repeated attempts to trigger this condition result in the firewall entering maintenance mode.
Panorama is not impacted by these vulnerabilities. (NVD)
Monitor Palo Alto Networks's and Siemens's web pages for any future patch releases. See vendor advisory link below.
| Source | Reference |
|---|---|
| NVD | https://nvd.nist.gov/vuln/detail/CVE-2026-0287 |
| CVE | https://www.cve.org/CVERecord?id=CVE-2026-0287 |
| Vendor advisory | https://security.paloaltonetworks.com/CVE-2026-0287 |