CVE-2026-0321 in PAN-OS: why an unaffected Cloud NGFW doesn't cancel patching

CVE-2026-0321 is an unauthenticated denial of service that reaches PAN-OS network services through a dataplane interface and can push devices into maintenance mode. Affected branches are 10.2, 11.1, 11.2, 12.1 and 12.2; the CVE record of 14 October 2026 lists Cloud NGFW and Panorama as unaffected, though Panorama carries CVE-2026-0318 from the same batch.

• CVE-2026-0321 is an unauthenticated dataplane DoS leading to maintenance mode
• Affected PAN-OS branches: 10.2, 11.1, 11.2, 12.1 and 12.2, each with its own fix
• Panorama is unaffected by this CVE but affected by CVE-2026-0318
• ZoomEye returned 22,599 Palo Alto Networks assets on 22 October 2026