Palo Alto Networks Firewall Vulnerability Allows Attackers To Trigger Denial Of Service

**Executive summary:** Palo Alto Networks disclosed CVE-2026-0227, a high-severity (CVSS 8.7) denial-of-service vulnerability in PAN-OS GlobalProtect gateway/portal that can let unauthenticated remote attackers repeatedly crash NGFWs and Prisma Access tenants, potentially forcing maintenance-mode outages; multiple PAN-OS branches are affected, a proof-of-concept exists, no in-the-wild exploitation has been reported, and the vendor recommends immediate upgrades to specified fixed maintenance releases as there are no mitigations.