Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability
CISA lists this Palo Alto Networks PAN-OS vulnerability as known exploited. The vendor's advisory has the fixed versions.
CISA catalog record
Palo Alto Networks PAN-OS contains a vulnerability in parsing and logging malicious DNS packets in the DNS Security feature that, when exploited, allows an unauthenticated attacker to remotely reboot the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.
- Product
- PAN-OS
- Added to KEV
- 30 Dec 2024
- Federal remediation due
- 20 Jan 2025
- Known ransomware use
- Not reported
What changed
First observed 14 Oct 2026No field changes in the recorded history.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.