Palo Alto Fixes Global Protect DoS Flaw That Can Crash Firewalls Without Login

Summary: Palo Alto Networks released security updates for a high-severity flaw, CVE-2026-0227 with a CVSS score of 7.7, in GlobalProtect Gateway and Portal PAN-OS software, and said a proof-of-concept exploit exists. The company said an unauthenticated attacker can cause a denial-of-service condition, and repeated attempts to trigger it put the firewall into maintenance mode; there are no workarounds, and the flaw applies only to PAN-OS NGFW or Prisma Access configurations with an enabled GlobalProtect gateway or portal.
What you should know: An unauthenticated attacker needs no credentials to push a firewall into maintenance mode, and exposed GlobalProtect gateways have seen repeated scanning activity over the past year, so the reconnaissance needed to find a target is already happening.

Read the original at The Hacker News ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-0227
Related: ⚡ Weekly Recap: Fortinet Exploits, Red Line Clipjack, NTLM Crack, Copilot Attack & More Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026