This vulnerability (CVE-2026-0287) in Palo Alto Networks PAN-OS Cloud NGFW software is classified under CWE-754 for improper checks of unusual or exceptional conditions. It allows an unauthenticated remote attacker to cause a denial of service by sending specially crafted network traffic to or through a dataplane interface. Repeated exploitation leads the firewall to enter maintenance mode, disrupting normal operations. Panorama is confirmed not impacted. There is no vendor advisory or patch information available at this time.

An unauthenticated attacker with network access can cause a denial of service condition on the affected firewall by triggering the vulnerability multiple times, forcing the device into maintenance mode and potentially disrupting network security enforcement. There is no indication of data compromise or privilege escalation. Panorama management systems are not affected.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, monitor for unusual traffic patterns targeting the dataplane interface and consider network-level controls to limit exposure. No official fix or temporary workaround has been published by Palo Alto Networks as of now.