A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only administrator role to cause a… (CVE-2026-0317)
Description
CVE-2026-0317 is a denial of service vulnerability in Palo Alto Networks PAN-OS software that allows an authenticated user with a read-only administrator role to cause a DoS condition by sending a specially crafted API request. The risk is mitigated by restricting management web interface access to trusted internal IP addresses. Cloud NGFW, Panorama, and Prisma Access are not affected by this issue. No patch information is provided, and no known exploits are reported in the wild.
CVSS v4.0
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with read-only administrator privileges to trigger a denial of service by sending a specially crafted API request. The vulnerability does not affect Palo Alto's cloud services such as Cloud NGFW, Panorama, and Prisma Access. The vendor recommends restricting management interface access to trusted internal IPs as a best practice to minimize risk. No official patch or fix details are provided in the available data.
Potential Impact
An authenticated user with read-only administrator access can cause a denial of service condition on the affected PAN-OS device, potentially disrupting management operations. The impact is limited by the requirement for authenticated access and the ability to restrict management interface access to trusted IP addresses. Cloud-based Palo Alto services are not affected.
Mitigation Recommendations
No official patch or fix is currently confirmed. The vendor recommends restricting access to the management web interface to trusted internal IP addresses as a best practice to significantly reduce the risk of exploitation. Monitor vendor advisories for updates regarding patch availability.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-2vcf-3mgj-78hr
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-0317"]
- Database Specific Severity
- LOW
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ad008912cdf04f656b90cd1
Added to database: 10/14/2026, 22:56:17 UTC
Last enriched: 10/14/2026, 22:58:50 UTC
Last updated: 10/15/2026, 02:48:08 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.