Palo Alto Networks Firewalls Hit by Unauthenticated GlobalProtect DoS Flaw

Palo Alto Networks disclosed CVE-2026-0227, a CVSS 7.7 vulnerability in PAN-OS GlobalProtect Gateway and Portal that allows unauthenticated attackers to trigger a denial-of-service causing firewalls to enter maintenance mode and stop processing traffic. Multiple PAN-OS release lines are affected; administrators are urged to upgrade to specified fixed versions immediately. Palo Alto reports no known malicious exploitation, and Cloud NGFW deployments are reportedly not affected.