CVEFinder.io

CVE-2026-0227

⚠️ high
🔍 Scan for this CVE
Summary

A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service (DoS) to the firewall. Repeated attempts to trigger this issue results in the firewall entering into maintenance mode.

CVSS Score
7.5
High
EPSS Score
0.1
Exploit Probability
Published Date
2026-01-15
First Seen: 2026-01-17
📊 Relative Risk Intelligence

This CVE is Moderate Risk - more severe than 69.1% of all 321,136 vulnerabilities in our database.

#99,378
Above average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: Jan 15, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
YES
Can be exploited automatically
💥 Technical Impact
Partial
Limited system impact
🏆 Discovered By
an external reporter
SSVC data provided by CISA
Last Modified 2026-02-06
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Vector 4.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:D/RE:M/U:Amber
CWE IDs (Weakness Types)

📦 Affected Products 39

🔗 References 1

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-0300 ⛔ critical 9.8 5.3 A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networ... 2026-05-06
CVE-2025-4614 ℹ️ low 2.7 0.1 An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator t... 2025-10-09
CVE-2025-4615 ⚠️ high 7.2 0.1 An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® softwa... 2025-10-09
CVE-2025-4231 ⚠️ high 7.2 0.1 A command injection vulnerability in Palo Alto Networks PAN-OS® enables an authenticated administrative user to perform... 2025-06-13
CVE-2025-0130 ⚠️ high 7.5 0.1 A missing exception check in Palo Alto Networks PAN-OS® software with the web proxy feature enabled allows an unauthent... 2025-05-14
CVE-2025-0124 ℹ️ low 3.8 0.5 An authenticated file deletion vulnerability in the Palo Alto Networks PAN-OS® software enables an authenticated attack... 2025-04-11
These CVEs affect the same products