This vulnerability involves improper checks for unusual or exceptional conditions (CWE-754) in Palo Alto Networks PAN-OS software for the Cloud NGFW. An unauthenticated attacker can exploit these flaws by sending crafted network traffic to or through a dataplane interface, causing denial of service by forcing the firewall into maintenance mode. The issue does not affect Panorama. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and high impact on availability. No known exploits are reported in the wild, and no vendor advisory or patch information is currently available.

Successful exploitation results in denial of service, causing the firewall to enter maintenance mode and potentially disrupting network traffic inspection and security enforcement. This impacts availability but does not indicate confidentiality or integrity loss. Panorama management systems are not impacted.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider limiting network access to the affected dataplane interfaces and monitor for unusual traffic patterns that could trigger the condition.