CVE-2026-0317: CWE-754 Improper Check for Unusual or Exceptional Conditions in Palo Alto Networks Cloud NGFW

This vulnerability (CVE-2026-0317) involves an improper check for unusual or exceptional conditions (CWE-754) in Palo Alto Networks PAN-OS software. An authenticated user with read-only administrator privileges can trigger a denial of service condition by sending a specially crafted API request. The vulnerability affects specific PAN-OS versions prior to fixed releases. Cloud NGFW, Panorama, and Prisma Access products are not impacted. The CVSS v4.0 base score is 1.2, indicating low severity.

An authenticated user with read-only administrator privileges can cause a denial of service condition on affected PAN-OS devices by sending a crafted API request. This could disrupt device management availability but does not allow privilege escalation or data compromise. The impact is limited by the requirement for authenticated access and the low CVSS score.

The vendor recommends restricting access to the management web interface to trusted internal IP addresses as a best practice to significantly reduce risk. Since this is a PAN-OS software vulnerability, applying vendor-provided patches when available is advised. Patch status is not explicitly confirmed in the provided data; check Palo Alto Networks advisories for official fixes. Cloud NGFW, Panorama, and Prisma Access are not affected and require no action for this issue.