PALO ALTO NETWORKS PATCHES FIREWALLS AFTER DISCOVERY OF A NEW DENIAL-OF-SERVICE FLAW

Summary from the TLDR InfoSec newsletter

Palo Alto Networks has patched CVE-2026-0227 (CVSS 7.7), a high-severity DoS vulnerability in PAN-OS affecting firewalls with GlobalProtect gateway or portal enabled that allows unauthenticated attackers to force devices into maintenance mode. A PoC already exists, and the flaw mirrors CVE-2024-3393 from late 2024, which was exploited as a zero-day before patches were available. Organizations running PAN-OS versions 10.2 through 12.1 with GlobalProtect enabled should apply patches immediately, while most Prisma Access customers have already been automatically updated.