Unauthenticated Attacker Can Trap Palo Alto Firewalls in Maintenance Mode Loop (CVE-2026-0229)

Palo Alto Networks PAN-OS contains CVE-2026-0229, a CVSSv4 6.6 denial-of-service vulnerability in the Advanced DNS Security (ADNS) feature that allows unauthenticated crafted packets to induce reboot loops and potentially push firewalls into maintenance mode; exploitation requires ADNS to be enabled and a spyware profile set to a non-allow action, and patches are available (upgrade to PAN-OS 12.1.4+ or 11.2.10+), while Cloud NGFW and Prisma Access are unaffected.