CVEFinder.io

CVE-2026-0262

⚠️ high
Summary

Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic. Panorama and Cloud NGFW are not impacted by these vulnerabilities.

CVSS Score
7.5
High
EPSS Score
0.4
Exploit Probability
Published Date
2026-05-13
First Seen: 2026-05-17
📊 Relative Risk Intelligence

This CVE is Moderate Risk - more severe than 67.8% of all 365,987 vulnerabilities in our database.

#117,982
Above average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: May 13, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Partial
Limited system impact
🏆 Discovered By
Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue. (other)
SSVC data provided by CISA
Last Modified 2026-07-14
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Vector 4.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:M/U:Amber
CWE IDs (Weakness Types)

📦 Affected Products 31

🔗 References 2

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-0301 ⚠️ high 7.5 0.3 An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an ... 2026-08-13
CVE-2026-0279 🔶 medium 6.1 0.3 Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal (aka Captive Portal) service, Glob... 2026-07-09
CVE-2026-0280 ⚠️ high 7.2 0.2 An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software enables an unauthentica... 2026-07-09
CVE-2026-0281 ⚠️ high 7.1 0.2 An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with... 2026-07-09
CVE-2026-0282 🔶 medium 6.5 0.2 A file deletion vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network a... 2026-07-09
CVE-2026-0283 ⚠️ high 7.2 0.2 An authentication bypass vulnerability in Large Scale VPN ( LSVPN) functionality of Palo Alto Networks PAN-OS software a... 2026-07-09
These CVEs affect the same products