Search

Find a vulnerability

Search criteria

    816 vulnerabilities by Palo Alto Networks

    CERTFR-2026-AVI-1396

    Vulnerability from certfr_avis - Published: 2026-10-27 - Updated: 2026-10-27

    Une vulnérabilité a été découverte dans les produits Palo Alto Networks. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.

    Solutions

    Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

    Des correctifs sont en attente de publication pour PAN-OS versions 12.1.4-h13, 12.1.10-h3, 11.2.4-h23, 11.2.7-h23, 11.2.13-h4 et 11.2.16-h1.

    Impacted products
    Vendor Product Description
    Palo Alto Networks Prisma Cloud Prisma Cloud - Application Security Transporter Client versions antérieures à 0.2.9
    Palo Alto Networks PAN-OS PAN-OS versions 12.2.x antérieures à 12.2.4-h1
    Palo Alto Networks PAN-OS PAN-OS versions 11.2.x antérieures à 11.2.10-h17
    Palo Alto Networks PAN-OS PAN-OS versions 12.1.x antérieures à 12.1.7-h11
    References

    Show details on source website
    To clipboard 

    {
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Prisma Cloud - Application Security Transporter Client versions ant\u00e9rieures \u00e0 0.2.9",
      "product": {
        "name": "Prisma Cloud",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 12.2.x ant\u00e9rieures \u00e0 12.2.4-h1",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.2.x ant\u00e9rieures \u00e0 11.2.10-h17",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 12.1.x ant\u00e9rieures \u00e0 12.1.7-h11",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "Des correctifs sont en attente de publication pour PAN-OS versions 12.1.4-h13, 12.1.10-h3, 11.2.4-h23, 11.2.7-h23, 11.2.13-h4 et 11.2.16-h1.",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-111497",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-111497"
    }
  ],
  "initial_release_date": "2026-10-27T00:00:00",
  "last_revision_date": "2026-10-27T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-1396",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-10-27T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits Palo Alto Networks. Elle permet \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
  "title": "Vuln\u00e9rabilit\u00e9 dans les produits Palo Alto Networks",
  "vendor_advisories": [
    {
      "published_at": "2026-10-26",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-111497",
      "url": "https://security.paloaltonetworks.com/CVE-2026-111497"
    }
  ]
}

    CERTFR-2026-AVI-1326

    Vulnerability from certfr_avis - Published: 2026-10-15 - Updated: 2026-10-15

    De multiples vulnérabilités ont été découvertes dans les produits Palo Alto Networks. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.

    Palo Alto Networks indique que la vulnérabilité CVE-2026-0322 est activement exploitée.

    Solutions

    Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

    Un correctif est en attente de publication pour PAN-OS versions 11.2.6.

    Impacted products
    Vendor Product Description
    Palo Alto Networks PAN-OS PAN-OS versions 11.2.10-x antérieures à 11.2.10-h15
    Palo Alto Networks PAN-OS PAN-OS versions 11.1.13-x antérieures à 11.1.13-h15
    Palo Alto Networks PAN-OS PAN-OS versions 10.2.13-x antérieures à 10.2.13-h26
    Palo Alto Networks GlobalProtect App GlobalProtect App versions 6.0.x antérieures à 6.0.15
    Palo Alto Networks PAN-OS PAN-OS versions 11.1.6-x antérieures à 11.1.6-h39
    Palo Alto Networks Prisma Access Prisma Access versions antérieures à 11.2.0 sans les derniers correctifs de sécurité
    Palo Alto Networks Prisma Access Prisma Access versions antérieures à 10.2.0 sans les derniers correctifs de sécurité
    Palo Alto Networks PAN-OS PAN-OS versions 11.2.4-x antérieures à 11.2.4-h22
    Palo Alto Networks PAN-OS PAN-OS versions 12.1.7-x antérieures à 12.1.7-h8
    Palo Alto Networks PAN-OS PAN-OS versions 11.1.10-x antérieures à 11.1.10-h41
    Palo Alto Networks Checkov by Prisma Cloud Checkov by Prisma Cloud versions 3.3.x antérieures à 3.3.25
    Palo Alto Networks PAN-OS PAN-OS versions 10.2.10-x antérieures à 10.2.10-h41
    Palo Alto Networks Cortex XSOAR Cortex XSOAR OS Query versions antérieures à 1.0.17
    Palo Alto Networks PAN-OS PAN-OS versions 10.2.18-x antérieures à 10.2.18-h12
    Palo Alto Networks PAN-OS PAN-OS versions antérieures à 12.2.4
    Palo Alto Networks PAN-OS PAN-OS versions 11.2.13-x antérieures à 11.2.13-h3
    Palo Alto Networks PAN-OS PAN-OS versions 10.2.16-x antérieures à 10.2.16-h11
    Palo Alto Networks Cortex XSIAM Cortex XSIAM OS Query versions antérieures à 1.0.17
    Palo Alto Networks PAN-OS PAN-OS versions 11.1.7-x antérieures à 11.1.7-h11
    Palo Alto Networks GlobalProtect App GlobalProtect App versions 6.2.x antérieures à 6.2.8-h15
    Palo Alto Networks PAN-OS PAN-OS versions 11.1.4-x antérieures à 11.1.4-h37
    Palo Alto Networks PAN-OS PAN-OS versions 10.2.7-x antérieures à 10.2.7-h38
    Palo Alto Networks Checkov by Prisma Cloud Checkov by Prisma Cloud versions 3.2.x antérieures à 3.2.533
    Palo Alto Networks PAN-OS PAN-OS versions antérieures à 11.2.16
    Palo Alto Networks Prisma Access Browser Prisma Browser versions antérieures à 152.8.5.83
    Palo Alto Networks PAN-OS PAN-OS versions 12.1.4-x antérieures à 12.1.4-h12
    Palo Alto Networks PAN-OS PAN-OS versions 11.1.16-x antérieures à 11.1.16-h3
    Palo Alto Networks PAN-OS PAN-OS versions 11.2.7-x antérieures à 11.2.7-h21
    Palo Alto Networks Prisma Access Prisma Access versions antérieures à 12.1.0 sans les derniers correctifs de sécurité
    Palo Alto Networks PAN-OS PAN-OS versions 12.1.10-x antérieures à 12.1.10-h2
    Palo Alto Networks GlobalProtect App GlobalProtect App versions 6.3.x antérieures à 6.3.3-h16
    References

    Show details on source website
    To clipboard 

    {
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "PAN-OS versions 11.2.10-x ant\u00e9rieures \u00e0 11.2.10-h15",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.1.13-x ant\u00e9rieures \u00e0 11.1.13-h15",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 10.2.13-x ant\u00e9rieures \u00e0 10.2.13-h26",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "GlobalProtect App versions 6.0.x ant\u00e9rieures \u00e0 6.0.15",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.1.6-x ant\u00e9rieures \u00e0 11.1.6-h39",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Prisma Access versions ant\u00e9rieures \u00e0 11.2.0 sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "Prisma Access",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Prisma Access versions ant\u00e9rieures \u00e0 10.2.0 sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "Prisma Access",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.2.4-x ant\u00e9rieures \u00e0 11.2.4-h22",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 12.1.7-x ant\u00e9rieures \u00e0 12.1.7-h8",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.1.10-x ant\u00e9rieures \u00e0 11.1.10-h41",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Checkov by Prisma Cloud  versions 3.3.x ant\u00e9rieures \u00e0 3.3.25",
      "product": {
        "name": "Checkov by Prisma Cloud",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 10.2.10-x ant\u00e9rieures \u00e0 10.2.10-h41",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Cortex XSOAR OS Query versions ant\u00e9rieures \u00e0 1.0.17",
      "product": {
        "name": "Cortex XSOAR",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 10.2.18-x ant\u00e9rieures \u00e0 10.2.18-h12",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions ant\u00e9rieures \u00e0 12.2.4",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.2.13-x ant\u00e9rieures \u00e0 11.2.13-h3",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 10.2.16-x ant\u00e9rieures \u00e0 10.2.16-h11",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Cortex XSIAM OS Query versions ant\u00e9rieures \u00e0 1.0.17",
      "product": {
        "name": "Cortex XSIAM",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.1.7-x ant\u00e9rieures \u00e0 11.1.7-h11",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "GlobalProtect App versions 6.2.x ant\u00e9rieures \u00e0 6.2.8-h15",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.1.4-x ant\u00e9rieures \u00e0 11.1.4-h37",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 10.2.7-x ant\u00e9rieures \u00e0 10.2.7-h38",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Checkov by Prisma Cloud versions 3.2.x ant\u00e9rieures \u00e0 3.2.533",
      "product": {
        "name": "Checkov by Prisma Cloud",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions ant\u00e9rieures \u00e0 11.2.16",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Prisma Browser versions ant\u00e9rieures \u00e0 152.8.5.83",
      "product": {
        "name": "Prisma Access Browser",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 12.1.4-x ant\u00e9rieures \u00e0 12.1.4-h12",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.1.16-x ant\u00e9rieures \u00e0 11.1.16-h3",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.2.7-x ant\u00e9rieures \u00e0 11.2.7-h21",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Prisma Access versions ant\u00e9rieures \u00e0 12.1.0 sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "Prisma Access",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 12.1.10-x ant\u00e9rieures \u00e0 12.1.10-h2",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "GlobalProtect App versions 6.3.x ant\u00e9rieures \u00e0 6.3.3-h16",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "Un correctif est en attente de publication pour PAN-OS versions 11.2.6.",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-87464",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87464"
    },
    {
      "name": "CVE-2026-87646",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87646"
    },
    {
      "name": "CVE-2026-87445",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87445"
    },
    {
      "name": "CVE-2026-87643",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87643"
    },
    {
      "name": "CVE-2026-85053",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85053"
    },
    {
      "name": "CVE-2026-87619",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87619"
    },
    {
      "name": "CVE-2026-87567",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87567"
    },
    {
      "name": "CVE-2026-95284",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95284"
    },
    {
      "name": "CVE-2026-95286",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95286"
    },
    {
      "name": "CVE-2026-102299",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102299"
    },
    {
      "name": "CVE-2026-87486",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87486"
    },
    {
      "name": "CVE-2026-87541",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87541"
    },
    {
      "name": "CVE-2026-87501",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87501"
    },
    {
      "name": "CVE-2026-87626",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87626"
    },
    {
      "name": "CVE-2026-87656",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87656"
    },
    {
      "name": "CVE-2026-95289",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95289"
    },
    {
      "name": "CVE-2026-102324",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102324"
    },
    {
      "name": "CVE-2026-85047",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85047"
    },
    {
      "name": "CVE-2026-95376",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95376"
    },
    {
      "name": "CVE-2026-87476",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87476"
    },
    {
      "name": "CVE-2026-95363",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95363"
    },
    {
      "name": "CVE-2026-95338",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95338"
    },
    {
      "name": "CVE-2026-87622",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87622"
    },
    {
      "name": "CVE-2026-87654",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87654"
    },
    {
      "name": "CVE-2026-87583",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87583"
    },
    {
      "name": "CVE-2026-87592",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87592"
    },
    {
      "name": "CVE-2026-0316",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0316"
    },
    {
      "name": "CVE-2026-87442",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87442"
    },
    {
      "name": "CVE-2026-91715",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91715"
    },
    {
      "name": "CVE-2026-87450",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87450"
    },
    {
      "name": "CVE-2026-95382",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95382"
    },
    {
      "name": "CVE-2026-87431",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87431"
    },
    {
      "name": "CVE-2026-87519",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87519"
    },
    {
      "name": "CVE-2026-95334",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95334"
    },
    {
      "name": "CVE-2026-91716",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91716"
    },
    {
      "name": "CVE-2026-87598",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87598"
    },
    {
      "name": "CVE-2026-95366",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95366"
    },
    {
      "name": "CVE-2026-87462",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87462"
    },
    {
      "name": "CVE-2026-95293",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95293"
    },
    {
      "name": "CVE-2026-91725",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91725"
    },
    {
      "name": "CVE-2026-87657",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87657"
    },
    {
      "name": "CVE-2026-87437",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87437"
    },
    {
      "name": "CVE-2026-87623",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87623"
    },
    {
      "name": "CVE-2026-0313",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0313"
    },
    {
      "name": "CVE-2026-95321",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95321"
    },
    {
      "name": "CVE-2026-95332",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95332"
    },
    {
      "name": "CVE-2026-87447",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87447"
    },
    {
      "name": "CVE-2026-87610",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87610"
    },
    {
      "name": "CVE-2026-87484",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87484"
    },
    {
      "name": "CVE-2026-102326",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102326"
    },
    {
      "name": "CVE-2026-91719",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91719"
    },
    {
      "name": "CVE-2026-102329",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102329"
    },
    {
      "name": "CVE-2026-91709",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91709"
    },
    {
      "name": "CVE-2026-87461",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87461"
    },
    {
      "name": "CVE-2026-87444",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87444"
    },
    {
      "name": "CVE-2026-91735",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91735"
    },
    {
      "name": "CVE-2026-95281",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95281"
    },
    {
      "name": "CVE-2026-87585",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87585"
    },
    {
      "name": "CVE-2026-87438",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87438"
    },
    {
      "name": "CVE-2026-87509",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87509"
    },
    {
      "name": "CVE-2026-87498",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87498"
    },
    {
      "name": "CVE-2026-102318",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102318"
    },
    {
      "name": "CVE-2026-87653",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87653"
    },
    {
      "name": "CVE-2026-95305",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95305"
    },
    {
      "name": "CVE-2026-102319",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102319"
    },
    {
      "name": "CVE-2026-106196",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-106196"
    },
    {
      "name": "CVE-2026-95365",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95365"
    },
    {
      "name": "CVE-2026-0311",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0311"
    },
    {
      "name": "CVE-2026-87453",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87453"
    },
    {
      "name": "CVE-2026-85043",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85043"
    },
    {
      "name": "CVE-2026-87595",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87595"
    },
    {
      "name": "CVE-2026-87550",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87550"
    },
    {
      "name": "CVE-2026-87537",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87537"
    },
    {
      "name": "CVE-2026-91722",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91722"
    },
    {
      "name": "CVE-2026-87524",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87524"
    },
    {
      "name": "CVE-2026-95285",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95285"
    },
    {
      "name": "CVE-2026-87439",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87439"
    },
    {
      "name": "CVE-2026-87568",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87568"
    },
    {
      "name": "CVE-2026-87607",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87607"
    },
    {
      "name": "CVE-2026-87544",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87544"
    },
    {
      "name": "CVE-2026-85046",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85046"
    },
    {
      "name": "CVE-2026-87639",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87639"
    },
    {
      "name": "CVE-2026-87650",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87650"
    },
    {
      "name": "CVE-2026-87429",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87429"
    },
    {
      "name": "CVE-2026-93381",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93381"
    },
    {
      "name": "CVE-2026-91726",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91726"
    },
    {
      "name": "CVE-2026-87635",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87635"
    },
    {
      "name": "CVE-2026-95358",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95358"
    },
    {
      "name": "CVE-2026-87630",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87630"
    },
    {
      "name": "CVE-2026-95279",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95279"
    },
    {
      "name": "CVE-2026-87542",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87542"
    },
    {
      "name": "CVE-2026-95360",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95360"
    },
    {
      "name": "CVE-2026-87517",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87517"
    },
    {
      "name": "CVE-2026-87605",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87605"
    },
    {
      "name": "CVE-2026-95324",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95324"
    },
    {
      "name": "CVE-2026-87443",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87443"
    },
    {
      "name": "CVE-2026-102301",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102301"
    },
    {
      "name": "CVE-2026-87434",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87434"
    },
    {
      "name": "CVE-2026-87569",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87569"
    },
    {
      "name": "CVE-2026-87492",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87492"
    },
    {
      "name": "CVE-2026-95312",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95312"
    },
    {
      "name": "CVE-2026-87454",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87454"
    },
    {
      "name": "CVE-2026-87596",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87596"
    },
    {
      "name": "CVE-2026-87640",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87640"
    },
    {
      "name": "CVE-2026-87532",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87532"
    },
    {
      "name": "CVE-2026-87488",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87488"
    },
    {
      "name": "CVE-2026-87483",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87483"
    },
    {
      "name": "CVE-2026-87658",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87658"
    },
    {
      "name": "CVE-2026-95280",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95280"
    },
    {
      "name": "CVE-2026-95362",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95362"
    },
    {
      "name": "CVE-2026-87573",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87573"
    },
    {
      "name": "CVE-2026-87564",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87564"
    },
    {
      "name": "CVE-2026-95295",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95295"
    },
    {
      "name": "CVE-2026-87499",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87499"
    },
    {
      "name": "CVE-2026-95327",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95327"
    },
    {
      "name": "CVE-2026-93387",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93387"
    },
    {
      "name": "CVE-2026-95328",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95328"
    },
    {
      "name": "CVE-2026-102325",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102325"
    },
    {
      "name": "CVE-2026-95344",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95344"
    },
    {
      "name": "CVE-2026-102305",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102305"
    },
    {
      "name": "CVE-2026-91728",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91728"
    },
    {
      "name": "CVE-2026-87468",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87468"
    },
    {
      "name": "CVE-2026-95364",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95364"
    },
    {
      "name": "CVE-2026-95361",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95361"
    },
    {
      "name": "CVE-2026-102323",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102323"
    },
    {
      "name": "CVE-2026-87606",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87606"
    },
    {
      "name": "CVE-2026-95287",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95287"
    },
    {
      "name": "CVE-2026-95381",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95381"
    },
    {
      "name": "CVE-2026-87652",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87652"
    },
    {
      "name": "CVE-2026-87632",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87632"
    },
    {
      "name": "CVE-2026-95359",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95359"
    },
    {
      "name": "CVE-2026-85048",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85048"
    },
    {
      "name": "CVE-2026-87511",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87511"
    },
    {
      "name": "CVE-2026-87515",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87515"
    },
    {
      "name": "CVE-2026-87496",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87496"
    },
    {
      "name": "CVE-2026-87588",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87588"
    },
    {
      "name": "CVE-2026-95336",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95336"
    },
    {
      "name": "CVE-2026-87469",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87469"
    },
    {
      "name": "CVE-2026-85044",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85044"
    },
    {
      "name": "CVE-2026-95355",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95355"
    },
    {
      "name": "CVE-2026-0322",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0322"
    },
    {
      "name": "CVE-2026-87575",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87575"
    },
    {
      "name": "CVE-2026-95346",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95346"
    },
    {
      "name": "CVE-2026-87601",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87601"
    },
    {
      "name": "CVE-2026-87566",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87566"
    },
    {
      "name": "CVE-2026-87617",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87617"
    },
    {
      "name": "CVE-2026-91720",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91720"
    },
    {
      "name": "CVE-2026-95375",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95375"
    },
    {
      "name": "CVE-2026-87481",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87481"
    },
    {
      "name": "CVE-2026-87480",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87480"
    },
    {
      "name": "CVE-2026-85049",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85049"
    },
    {
      "name": "CVE-2026-102310",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102310"
    },
    {
      "name": "CVE-2026-87553",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87553"
    },
    {
      "name": "CVE-2026-87641",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87641"
    },
    {
      "name": "CVE-2026-87514",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87514"
    },
    {
      "name": "CVE-2026-87594",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87594"
    },
    {
      "name": "CVE-2026-91708",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91708"
    },
    {
      "name": "CVE-2026-87576",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87576"
    },
    {
      "name": "CVE-2026-95373",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95373"
    },
    {
      "name": "CVE-2026-87631",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87631"
    },
    {
      "name": "CVE-2026-87614",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87614"
    },
    {
      "name": "CVE-2026-87649",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87649"
    },
    {
      "name": "CVE-2026-87455",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87455"
    },
    {
      "name": "CVE-2026-95374",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95374"
    },
    {
      "name": "CVE-2026-87535",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87535"
    },
    {
      "name": "CVE-2026-95370",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95370"
    },
    {
      "name": "CVE-2026-87436",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87436"
    },
    {
      "name": "CVE-2026-95369",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95369"
    },
    {
      "name": "CVE-2026-87621",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87621"
    },
    {
      "name": "CVE-2026-95322",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95322"
    },
    {
      "name": "CVE-2026-87516",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87516"
    },
    {
      "name": "CVE-2026-87551",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87551"
    },
    {
      "name": "CVE-2026-95342",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95342"
    },
    {
      "name": "CVE-2026-93379",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93379"
    },
    {
      "name": "CVE-2026-95292",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95292"
    },
    {
      "name": "CVE-2026-102317",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102317"
    },
    {
      "name": "CVE-2026-95330",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95330"
    },
    {
      "name": "CVE-2026-87525",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87525"
    },
    {
      "name": "CVE-2026-93376",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93376"
    },
    {
      "name": "CVE-2026-87608",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87608"
    },
    {
      "name": "CVE-2026-95331",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95331"
    },
    {
      "name": "CVE-2026-95317",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95317"
    },
    {
      "name": "CVE-2026-87491",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87491"
    },
    {
      "name": "CVE-2026-102314",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102314"
    },
    {
      "name": "CVE-2026-93384",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93384"
    },
    {
      "name": "CVE-2026-95333",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95333"
    },
    {
      "name": "CVE-2026-87531",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87531"
    },
    {
      "name": "CVE-2026-87513",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87513"
    },
    {
      "name": "CVE-2026-87547",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87547"
    },
    {
      "name": "CVE-2026-87558",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87558"
    },
    {
      "name": "CVE-2026-87495",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87495"
    },
    {
      "name": "CVE-2026-102312",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102312"
    },
    {
      "name": "CVE-2026-87505",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87505"
    },
    {
      "name": "CVE-2026-87482",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87482"
    },
    {
      "name": "CVE-2026-95380",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95380"
    },
    {
      "name": "CVE-2026-91721",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91721"
    },
    {
      "name": "CVE-2026-106414",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-106414"
    },
    {
      "name": "CVE-2026-87440",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87440"
    },
    {
      "name": "CVE-2026-95372",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95372"
    },
    {
      "name": "CVE-2026-0317",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0317"
    },
    {
      "name": "CVE-2026-87529",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87529"
    },
    {
      "name": "CVE-2026-106401",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-106401"
    },
    {
      "name": "CVE-2026-102313",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102313"
    },
    {
      "name": "CVE-2026-87593",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87593"
    },
    {
      "name": "CVE-2026-87609",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87609"
    },
    {
      "name": "CVE-2026-93380",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93380"
    },
    {
      "name": "CVE-2026-87590",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87590"
    },
    {
      "name": "CVE-2026-91710",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91710"
    },
    {
      "name": "CVE-2026-91747",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91747"
    },
    {
      "name": "CVE-2026-87615",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87615"
    },
    {
      "name": "CVE-2026-87536",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87536"
    },
    {
      "name": "CVE-2026-87459",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87459"
    },
    {
      "name": "CVE-2026-95304",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95304"
    },
    {
      "name": "CVE-2026-87561",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87561"
    },
    {
      "name": "CVE-2026-95275",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95275"
    },
    {
      "name": "CVE-2026-91748",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91748"
    },
    {
      "name": "CVE-2026-87638",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87638"
    },
    {
      "name": "CVE-2026-95306",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95306"
    },
    {
      "name": "CVE-2026-87451",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87451"
    },
    {
      "name": "CVE-2026-87543",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87543"
    },
    {
      "name": "CVE-2026-95326",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95326"
    },
    {
      "name": "CVE-2026-102331",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102331"
    },
    {
      "name": "CVE-2026-102328",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102328"
    },
    {
      "name": "CVE-2026-91743",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91743"
    },
    {
      "name": "CVE-2026-87527",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87527"
    },
    {
      "name": "CVE-2026-85052",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85052"
    },
    {
      "name": "CVE-2026-87637",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87637"
    },
    {
      "name": "CVE-2026-91749",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91749"
    },
    {
      "name": "CVE-2026-91717",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91717"
    },
    {
      "name": "CVE-2026-87540",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87540"
    },
    {
      "name": "CVE-2026-93375",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93375"
    },
    {
      "name": "CVE-2026-106426",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-106426"
    },
    {
      "name": "CVE-2026-87627",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87627"
    },
    {
      "name": "CVE-2026-91727",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91727"
    },
    {
      "name": "CVE-2026-87589",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87589"
    },
    {
      "name": "CVE-2026-87557",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87557"
    },
    {
      "name": "CVE-2026-87539",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87539"
    },
    {
      "name": "CVE-2026-102315",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102315"
    },
    {
      "name": "CVE-2026-93373",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93373"
    },
    {
      "name": "CVE-2026-93377",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93377"
    },
    {
      "name": "CVE-2026-87581",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87581"
    },
    {
      "name": "CVE-2026-95274",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95274"
    },
    {
      "name": "CVE-2026-91729",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91729"
    },
    {
      "name": "CVE-2026-87457",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87457"
    },
    {
      "name": "CVE-2026-87651",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87651"
    },
    {
      "name": "CVE-2026-0312",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0312"
    },
    {
      "name": "CVE-2026-95329",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95329"
    },
    {
      "name": "CVE-2026-95335",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95335"
    },
    {
      "name": "CVE-2026-87433",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87433"
    },
    {
      "name": "CVE-2026-87642",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87642"
    },
    {
      "name": "CVE-2026-85045",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85045"
    },
    {
      "name": "CVE-2026-95323",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95323"
    },
    {
      "name": "CVE-2026-87449",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87449"
    },
    {
      "name": "CVE-2026-102327",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102327"
    },
    {
      "name": "CVE-2026-87586",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87586"
    },
    {
      "name": "CVE-2026-87616",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87616"
    },
    {
      "name": "CVE-2026-95308",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95308"
    },
    {
      "name": "CVE-2026-95313",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95313"
    },
    {
      "name": "CVE-2026-87528",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87528"
    },
    {
      "name": "CVE-2026-91712",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91712"
    },
    {
      "name": "CVE-2026-102321",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102321"
    },
    {
      "name": "CVE-2026-91746",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91746"
    },
    {
      "name": "CVE-2026-87556",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87556"
    },
    {
      "name": "CVE-2026-87522",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87522"
    },
    {
      "name": "CVE-2026-87494",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87494"
    },
    {
      "name": "CVE-2026-95385",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95385"
    },
    {
      "name": "CVE-2026-87448",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87448"
    },
    {
      "name": "CVE-2026-87477",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87477"
    },
    {
      "name": "CVE-2026-91734",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91734"
    },
    {
      "name": "CVE-2026-95310",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95310"
    },
    {
      "name": "CVE-2026-87478",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87478"
    },
    {
      "name": "CVE-2026-87636",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87636"
    },
    {
      "name": "CVE-2026-87430",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87430"
    },
    {
      "name": "CVE-2026-87435",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87435"
    },
    {
      "name": "CVE-2026-87602",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87602"
    },
    {
      "name": "CVE-2026-91713",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91713"
    },
    {
      "name": "CVE-2026-95296",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95296"
    },
    {
      "name": "CVE-2026-87452",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87452"
    },
    {
      "name": "CVE-2026-87648",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87648"
    },
    {
      "name": "CVE-2026-87600",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87600"
    },
    {
      "name": "CVE-2026-87572",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87572"
    },
    {
      "name": "CVE-2026-106404",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-106404"
    },
    {
      "name": "CVE-2026-95350",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95350"
    },
    {
      "name": "CVE-2026-87463",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87463"
    },
    {
      "name": "CVE-2026-87507",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87507"
    },
    {
      "name": "CVE-2026-91714",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91714"
    },
    {
      "name": "CVE-2026-102306",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102306"
    },
    {
      "name": "CVE-2026-102302",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102302"
    },
    {
      "name": "CVE-2026-95303",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95303"
    },
    {
      "name": "CVE-2026-87574",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87574"
    },
    {
      "name": "CVE-2026-87458",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87458"
    },
    {
      "name": "CVE-2026-102300",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102300"
    },
    {
      "name": "CVE-2026-91733",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91733"
    },
    {
      "name": "CVE-2026-85042",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85042"
    },
    {
      "name": "CVE-2026-91732",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91732"
    },
    {
      "name": "CVE-2026-95319",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95319"
    },
    {
      "name": "CVE-2026-95339",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95339"
    },
    {
      "name": "CVE-2026-95367",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95367"
    },
    {
      "name": "CVE-2026-95301",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95301"
    },
    {
      "name": "CVE-2026-87493",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87493"
    },
    {
      "name": "CVE-2026-87470",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87470"
    },
    {
      "name": "CVE-2026-102308",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102308"
    },
    {
      "name": "CVE-2026-95316",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95316"
    },
    {
      "name": "CVE-2026-87570",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87570"
    },
    {
      "name": "CVE-2026-95320",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95320"
    },
    {
      "name": "CVE-2026-87578",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87578"
    },
    {
      "name": "CVE-2026-93385",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93385"
    },
    {
      "name": "CVE-2026-91730",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91730"
    },
    {
      "name": "CVE-2026-87645",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87645"
    },
    {
      "name": "CVE-2026-87580",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87580"
    },
    {
      "name": "CVE-2026-87604",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87604"
    },
    {
      "name": "CVE-2026-95325",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95325"
    },
    {
      "name": "CVE-2026-93374",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93374"
    },
    {
      "name": "CVE-2026-95302",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95302"
    },
    {
      "name": "CVE-2026-87473",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87473"
    },
    {
      "name": "CVE-2026-95318",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95318"
    },
    {
      "name": "CVE-2026-87487",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87487"
    },
    {
      "name": "CVE-2026-87647",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87647"
    },
    {
      "name": "CVE-2026-95343",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95343"
    },
    {
      "name": "CVE-2026-95351",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95351"
    },
    {
      "name": "CVE-2026-87446",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87446"
    },
    {
      "name": "CVE-2026-102307",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102307"
    },
    {
      "name": "CVE-2026-0320",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0320"
    },
    {
      "name": "CVE-2026-95368",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95368"
    },
    {
      "name": "CVE-2026-95354",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95354"
    },
    {
      "name": "CVE-2026-87633",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87633"
    },
    {
      "name": "CVE-2026-87512",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87512"
    },
    {
      "name": "CVE-2026-95345",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95345"
    },
    {
      "name": "CVE-2026-87587",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87587"
    },
    {
      "name": "CVE-2026-87634",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87634"
    },
    {
      "name": "CVE-2026-102303",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102303"
    },
    {
      "name": "CVE-2026-87546",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87546"
    },
    {
      "name": "CVE-2026-102304",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102304"
    },
    {
      "name": "CVE-2026-0318",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0318"
    },
    {
      "name": "CVE-2026-0314",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0314"
    },
    {
      "name": "CVE-2026-87432",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87432"
    },
    {
      "name": "CVE-2026-91718",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91718"
    },
    {
      "name": "CVE-2026-87479",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87479"
    },
    {
      "name": "CVE-2026-91745",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91745"
    },
    {
      "name": "CVE-2026-87625",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87625"
    },
    {
      "name": "CVE-2026-87518",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87518"
    },
    {
      "name": "CVE-2026-87545",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87545"
    },
    {
      "name": "CVE-2026-87465",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87465"
    },
    {
      "name": "CVE-2026-87560",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87560"
    },
    {
      "name": "CVE-2026-91723",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91723"
    },
    {
      "name": "CVE-2026-87563",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87563"
    },
    {
      "name": "CVE-2026-95298",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95298"
    },
    {
      "name": "CVE-2026-91744",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91744"
    },
    {
      "name": "CVE-2026-106393",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-106393"
    },
    {
      "name": "CVE-2026-87534",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87534"
    },
    {
      "name": "CVE-2026-87508",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87508"
    },
    {
      "name": "CVE-2026-95309",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95309"
    },
    {
      "name": "CVE-2026-102316",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102316"
    },
    {
      "name": "CVE-2026-91740",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91740"
    },
    {
      "name": "CVE-2026-95291",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95291"
    },
    {
      "name": "CVE-2026-87613",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87613"
    },
    {
      "name": "CVE-2026-93383",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93383"
    },
    {
      "name": "CVE-2026-102311",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102311"
    },
    {
      "name": "CVE-2026-87472",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87472"
    },
    {
      "name": "CVE-2026-85051",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85051"
    },
    {
      "name": "CVE-2026-87628",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87628"
    },
    {
      "name": "CVE-2026-95384",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95384"
    },
    {
      "name": "CVE-2026-91731",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91731"
    },
    {
      "name": "CVE-2026-102309",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102309"
    },
    {
      "name": "CVE-2026-95311",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95311"
    },
    {
      "name": "CVE-2026-87565",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87565"
    },
    {
      "name": "CVE-2026-87599",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87599"
    },
    {
      "name": "CVE-2026-87552",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87552"
    },
    {
      "name": "CVE-2026-0321",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0321"
    },
    {
      "name": "CVE-2026-87474",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87474"
    },
    {
      "name": "CVE-2026-95278",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95278"
    },
    {
      "name": "CVE-2026-87467",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87467"
    },
    {
      "name": "CVE-2026-87612",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87612"
    },
    {
      "name": "CVE-2026-95290",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95290"
    },
    {
      "name": "CVE-2026-87549",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87549"
    },
    {
      "name": "CVE-2026-95300",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95300"
    },
    {
      "name": "CVE-2026-87611",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87611"
    },
    {
      "name": "CVE-2026-87603",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87603"
    },
    {
      "name": "CVE-2026-87644",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87644"
    },
    {
      "name": "CVE-2026-95357",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95357"
    },
    {
      "name": "CVE-2026-87655",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87655"
    },
    {
      "name": "CVE-2026-95307",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95307"
    },
    {
      "name": "CVE-2026-95340",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95340"
    },
    {
      "name": "CVE-2026-91738",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91738"
    },
    {
      "name": "CVE-2026-87530",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87530"
    },
    {
      "name": "CVE-2026-87506",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87506"
    },
    {
      "name": "CVE-2026-91739",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91739"
    },
    {
      "name": "CVE-2026-95276",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95276"
    },
    {
      "name": "CVE-2026-87466",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87466"
    },
    {
      "name": "CVE-2026-95283",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95283"
    },
    {
      "name": "CVE-2026-87521",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87521"
    },
    {
      "name": "CVE-2026-106244",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-106244"
    },
    {
      "name": "CVE-2026-102330",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102330"
    },
    {
      "name": "CVE-2026-95315",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95315"
    },
    {
      "name": "CVE-2026-0319",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0319"
    },
    {
      "name": "CVE-2026-87497",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87497"
    },
    {
      "name": "CVE-2026-102320",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102320"
    },
    {
      "name": "CVE-2026-87441",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87441"
    },
    {
      "name": "CVE-2026-93382",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93382"
    },
    {
      "name": "CVE-2026-87471",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87471"
    },
    {
      "name": "CVE-2026-87577",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87577"
    },
    {
      "name": "CVE-2026-95294",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95294"
    },
    {
      "name": "CVE-2026-95353",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95353"
    },
    {
      "name": "CVE-2026-91742",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91742"
    },
    {
      "name": "CVE-2026-87597",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87597"
    },
    {
      "name": "CVE-2026-87460",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87460"
    },
    {
      "name": "CVE-2026-91724",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91724"
    },
    {
      "name": "CVE-2026-87571",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87571"
    },
    {
      "name": "CVE-2026-87591",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87591"
    },
    {
      "name": "CVE-2026-87618",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87618"
    },
    {
      "name": "CVE-2026-95352",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95352"
    },
    {
      "name": "CVE-2026-87548",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87548"
    },
    {
      "name": "CVE-2026-87538",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87538"
    },
    {
      "name": "CVE-2026-95297",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95297"
    },
    {
      "name": "CVE-2026-93386",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93386"
    },
    {
      "name": "CVE-2026-106185",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-106185"
    },
    {
      "name": "CVE-2026-106408",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-106408"
    },
    {
      "name": "CVE-2026-87555",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87555"
    },
    {
      "name": "CVE-2026-95282",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95282"
    },
    {
      "name": "CVE-2026-95337",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95337"
    },
    {
      "name": "CVE-2026-91736",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91736"
    },
    {
      "name": "CVE-2026-87620",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87620"
    },
    {
      "name": "CVE-2026-87520",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87520"
    },
    {
      "name": "CVE-2026-87490",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87490"
    },
    {
      "name": "CVE-2026-87475",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87475"
    },
    {
      "name": "CVE-2026-87559",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87559"
    },
    {
      "name": "CVE-2026-87500",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87500"
    },
    {
      "name": "CVE-2026-95347",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95347"
    },
    {
      "name": "CVE-2026-87504",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87504"
    },
    {
      "name": "CVE-2026-95314",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95314"
    },
    {
      "name": "CVE-2026-95277",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95277"
    },
    {
      "name": "CVE-2026-95288",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95288"
    },
    {
      "name": "CVE-2026-87582",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87582"
    },
    {
      "name": "CVE-2026-87523",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87523"
    },
    {
      "name": "CVE-2026-87624",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87624"
    },
    {
      "name": "CVE-2026-95341",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95341"
    },
    {
      "name": "CVE-2026-93378",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93378"
    },
    {
      "name": "CVE-2026-91737",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91737"
    },
    {
      "name": "CVE-2026-87579",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87579"
    },
    {
      "name": "CVE-2026-91711",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91711"
    },
    {
      "name": "CVE-2026-85050",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85050"
    },
    {
      "name": "CVE-2026-87502",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87502"
    },
    {
      "name": "CVE-2026-95349",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95349"
    },
    {
      "name": "CVE-2026-87489",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87489"
    },
    {
      "name": "CVE-2026-91741",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91741"
    },
    {
      "name": "CVE-2026-95356",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95356"
    },
    {
      "name": "CVE-2026-95299",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95299"
    },
    {
      "name": "CVE-2026-87526",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87526"
    },
    {
      "name": "CVE-2026-87510",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87510"
    },
    {
      "name": "CVE-2026-87533",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87533"
    },
    {
      "name": "CVE-2026-87584",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87584"
    },
    {
      "name": "CVE-2026-93372",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93372"
    },
    {
      "name": "CVE-2026-87562",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87562"
    },
    {
      "name": "CVE-2026-87503",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87503"
    },
    {
      "name": "CVE-2026-0315",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0315"
    },
    {
      "name": "CVE-2026-87629",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87629"
    },
    {
      "name": "CVE-2026-95348",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95348"
    },
    {
      "name": "CVE-2026-95371",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95371"
    },
    {
      "name": "CVE-2026-87485",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87485"
    },
    {
      "name": "CVE-2026-87554",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87554"
    },
    {
      "name": "CVE-2026-87456",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87456"
    }
  ],
  "initial_release_date": "2026-10-15T00:00:00",
  "last_revision_date": "2026-10-15T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-1326",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-10-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Falsification de requ\u00eates c\u00f4t\u00e9 serveur (SSRF)"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Palo Alto Networks. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.\n\nPalo Alto Networks indique que la vuln\u00e9rabilit\u00e9 CVE-2026-0322 est activement exploit\u00e9e.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Palo Alto Networks",
  "vendor_advisories": [
    {
      "published_at": "2026-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0319",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0319"
    },
    {
      "published_at": "2026-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0314",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0314"
    },
    {
      "published_at": "2026-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0317",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0317"
    },
    {
      "published_at": "2026-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0313",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0313"
    },
    {
      "published_at": "2026-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0318",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0318"
    },
    {
      "published_at": "2026-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0321",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0321"
    },
    {
      "published_at": "2026-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0316",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0316"
    },
    {
      "published_at": "2026-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0320",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0320"
    },
    {
      "published_at": "2026-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks PAN-SA-2026-0013",
      "url": "https://security.paloaltonetworks.com/PAN-SA-2026-0013"
    },
    {
      "published_at": "2026-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0312",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0312"
    },
    {
      "published_at": "2026-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0315",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0315"
    },
    {
      "published_at": "2026-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0322",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0322"
    },
    {
      "published_at": "2026-10-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0311",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0311"
    }
  ]
}

    CVE-2026-45165 (GCVE-0-2026-45165)

    Vulnerability from nvd – Published: 2026-10-15 19:00 – Updated: 2026-10-15 20:23
    VLAI
    Title
    Idira Secrets Manager (Self-Hosted): Improper Authorization in REST API
    Summary
    An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access controls on the branch or cause a denial of service (DoS). Idira Security Bulletin CA26-38.
    Severity
    8.6 (High)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/S:N/AU:N/R:U/V:D/RE:M/U:Amber
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-15 20:19 UTC
    CWE
    • CWE-863 - (Incorrect Authorization)
    Assigner
    palo_alto CNA under the mitre root
    CNA scorecard A 95/100 over 96 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Palo Alto Networks Idira Secrets Manager (Self-Hosted) Affected: 13.9 , < 13.9.1 (custom)
        cpe:2.3:a:palo_alto_networks:idira_secrets_manager_self-hosted_:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Credits
    George Chen
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-45165",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T20:19:57.634495Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T20:23:40.239Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Idira Secrets Manager (Self-Hosted)",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "13.9.1",
                  "status": "unaffected"
                }
              ],
              "lessThan": "13.9.1",
              "status": "affected",
              "version": "13.9",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:idira_secrets_manager_self-hosted_:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "13.9.1",
                  "versionStartIncluding": "13.9",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "George Chen"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access controls on the branch or cause a denial of service (DoS). Idira Security Bulletin CA26-38."
            }
          ],
          "value": "An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access controls on the branch or cause a denial of service (DoS). Idira Security Bulletin CA26-38."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-180",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-180: Exploiting Incorrectly Configured Access Control Security Levels"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NEGLIGIBLE",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/S:N/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "CWE-863 (Incorrect Authorization)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-15T19:14:04.921Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://docs.cyberark.com/secrets-manager-sh/13.9/en/content/enterprise/releasenotes/release-notes-13.9.1.htm?tocpath=Get%20started%7CRelease%20Notes%7C_____3"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-14T00:10:00.000Z",
          "value": "Initial publication."
        }
      ],
      "title": "Idira Secrets Manager (Self-Hosted): Improper Authorization in REST API",
      "x_affectedList": [
        "Idira Secrets Manager (Self-Hosted) 13.9.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-45165",
    "datePublished": "2026-10-15T19:00:55.521Z",
    "dateReserved": "2026-05-08T23:00:57.502Z",
    "dateUpdated": "2026-10-15T20:23:40.239Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-0320 (GCVE-0-2026-0320)

    Vulnerability from nvd – Published: 2026-10-14 20:09 – Updated: 2026-10-16 03:56
    VLAI
    Title
    PAN-OS: Authenticated Admin Command Injection Vulnerability
    Summary
    A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS management interface. The security risk posed by this issue is significantly minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma® Access are not affected by this vulnerability.
    Severity
    6.1 (Medium)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
    5.7 (Medium)
    CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-15 00:00 UTC
    CWE
    • CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
    Assigner
    palo_alto CNA under the mitre root
    CNA scorecard A 95/100 over 96 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Palo Alto Networks Cloud NGFW Unaffected: All (custom)
    		Create a notification for this product.
    Palo Alto Networks PAN-OS Affected: 12.2.0 , < 12.2.4 (custom)
    Affected: 12.1.0 , < 12.1.10-h2 (custom)
    Affected: 11.2.0 , < 11.2.16 (custom)
    Affected: 11.1.0 , < 11.1.16-h3 (custom)
    Affected: 10.2.0 , < 10.2.18-h12 (custom)
        cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h33:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h32:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h30:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h28:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h27:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h26:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h25:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h38:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h36:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h35:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h34:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h33:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h32:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h36:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h35:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h34:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h33:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h25:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h24:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h23:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h22:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h40:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h39:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h37:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h36:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h37:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h36:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h35:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h34:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h32:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h24:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h23:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h22:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h20:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h19:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h16:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*
    		Create a notification for this product.
    Palo Alto Networks Prisma Access Unaffected: All , < 12.1.7-h8 (custom)
    		Create a notification for this product.
    Date Public
    2026-10-14 16:00
    Credits
    Daniel Voce (internal reporter)
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0320",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-16T03:56:59.391Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Cloud NGFW",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h33:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h32:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h30:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h28:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h27:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h26:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h25:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h38:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h35:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h34:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h33:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h32:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h35:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h34:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h33:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h25:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h24:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h22:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h40:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h39:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h37:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h37:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h35:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h34:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h32:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h24:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h22:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h20:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h19:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h16:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "PAN-OS",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.2.4",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.2.4",
              "status": "affected",
              "version": "12.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "12.1.10-h2",
                  "status": "unaffected"
                },
                {
                  "at": "12.1.7-h8",
                  "status": "unaffected"
                },
                {
                  "at": "12.1.4-h12",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.1.10-h2",
              "status": "affected",
              "version": "12.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.2.16",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.13-h3",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.10-h15",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.7-h21",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.4-h22",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.2.16",
              "status": "affected",
              "version": "11.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.1.16-h3",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.13-h15",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.10-h35",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.7-h11",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.6-h39",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.4-h37",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.1.16-h3",
              "status": "affected",
              "version": "11.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "10.2.18-h12",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.16-h11",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.13-h26",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.10-h41",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.7-h38",
                  "status": "unaffected"
                }
              ],
              "lessThan": "10.2.18-h12",
              "status": "affected",
              "version": "10.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Prisma Access",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.1.7-h8",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.1.7-h8",
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.2.4",
                  "versionStartIncluding": "12.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.1.10-h2",
                  "versionStartIncluding": "12.1.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.1.7-h8",
                  "versionStartIncluding": "12.1.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.1.4-h12",
                  "versionStartIncluding": "12.1.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.2.16",
                  "versionStartIncluding": "11.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.2.13-h3",
                  "versionStartIncluding": "11.2.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.2.10-h15",
                  "versionStartIncluding": "11.2.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.2.7-h21",
                  "versionStartIncluding": "11.2.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.2.4-h22",
                  "versionStartIncluding": "11.2.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.1.16-h3",
                  "versionStartIncluding": "11.1.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.1.13-h15",
                  "versionStartIncluding": "11.1.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.1.10-h35",
                  "versionStartIncluding": "11.1.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.1.7-h11",
                  "versionStartIncluding": "11.1.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.1.6-h39",
                  "versionStartIncluding": "11.1.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.1.4-h37",
                  "versionStartIncluding": "11.1.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.2.18-h12",
                  "versionStartIncluding": "10.2.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.2.16-h11",
                  "versionStartIncluding": "10.2.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.2.13-h26",
                  "versionStartIncluding": "10.2.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.2.10-h41",
                  "versionStartIncluding": "10.2.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.2.7-h38",
                  "versionStartIncluding": "10.2.7",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Daniel Voce (internal reporter)"
        }
      ],
      "datePublic": "2026-10-14T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cspan\u003eA command injection vulnerability in Palo Alto Networks PAN-OS\u00ae software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS management interface.\u003c/span\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003c/p\u003e\u003cb\u003e\u003c/b\u003e\u003cp\u003e\u003cspan\u003eThe security risk posed by this issue is significantly minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended\u0026nbsp;\u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431\"\u003e\u003cspan\u003ebest practice deployment guidelines\u003c/span\u003e\u003c/a\u003e\u003cspan\u003e.\u003c/span\u003e\u003c/p\u003e\u003cp\u003e\u003cspan\u003eThis issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).\u003c/span\u003e\u003c/p\u003e\u003cp\u003e\u003cspan\u003eCloud NGFW and Prisma\u00ae Access are not affected by this vulnerability.\u003c/span\u003e\u003c/p\u003e"
            }
          ],
          "value": "A command injection vulnerability in Palo Alto Networks PAN-OS\u00ae software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS management interface.\n\n\n\n\nThe security risk posed by this issue is significantly minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended\u00a0 best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .\n\n\n\nThis issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).\n\n\n\nCloud NGFW and Prisma\u00ae Access are not affected by this vulnerability."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-248",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-248 Command Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "The risk is highest when you allow access to the management interface from external IP addresses on the internet. Our recommendation is to remediate as soon as possible."
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 5.7,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "You can reduce the risk of exploitation by restricting access to a jump box that is the only system allowed to access the management interface. This will ensure that attacks can succeed only if they obtain privileged access through those specified IP addresses."
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T20:09:49.697Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0320"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 12.2\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.2.0 through 12.2.3\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.2.4 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 12.1\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.1.8 through 12.1.10-h* \u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.1.10-h2 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.1.5 through 12.1.7-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.1.7-h8 or 12.1.10-h2 or later.\u003cbr\u003e\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.1.2 through 12.1.4-h*\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.1.4-h12 or 12.1.10-h2 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 11.2\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.14 through 11.2.15 \u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.11 through 11.2.13-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.13-h3 or 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.8 through 11.2.10-h*\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.10-h15 or 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.5 through 11.2.7-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.7-h21 or 11.2.16 or later.\u003cbr\u003e\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.0 through 11.2.4-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.4-h22 or 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 11.1\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.14 through 11.1.16-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.11 through 11.1.13-h*\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.13-h15 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.8 through 11.1.10-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.10-h35 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.7 through 11.1.7-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.7-h11 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.5 through 11.1.6-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.6-h39 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.0 through 11.1.4-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.4-h37 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 10.2\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.17 through 10.2.18-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.14 through 10.2.16-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.16-h11 or 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.11 through 10.2.13-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.13-h26 or 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.8 through 10.2.10-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.10-h41 or 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.0 through 10.2.7-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.7-h38 or 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "Version\nMinor Version\nSuggested Solution\n\n                                PAN-OS 12.2\n\n                                12.2.0 through 12.2.3\n                                Upgrade to 12.2.4 or later.\n                            \n                                PAN-OS 12.1\n\n                                12.1.8 through 12.1.10-h* \n                                Upgrade to 12.1.10-h2 or later.\n                            \n                                \n                                12.1.5 through 12.1.7-h*\n                                Upgrade to 12.1.7-h8 or 12.1.10-h2 or later.\n\n                            \n                                \n                                12.1.2 through 12.1.4-h*\n\n                                Upgrade to 12.1.4-h12 or 12.1.10-h2 or later.\n                            \n                                PAN-OS 11.2\n\n                                11.2.14 through 11.2.15 \n                                Upgrade to 11.2.16 or later.\n                            \n                                \n                                11.2.11 through 11.2.13-h*\n                                Upgrade to 11.2.13-h3 or 11.2.16 or later.\n                            \n                                \n                                11.2.8 through 11.2.10-h*\n\n                                Upgrade to 11.2.10-h15 or 11.2.16 or later.\n                            \n                                \n                                11.2.5 through 11.2.7-h*\n                                Upgrade to 11.2.7-h21 or 11.2.16 or later.\n\n                            \n                                \n                                11.2.0 through 11.2.4-h*\n                                Upgrade to 11.2.4-h22 or 11.2.16 or later.\n                            \n                                PAN-OS 11.1\n\n                                11.1.14 through 11.1.16-h*\n                                Upgrade to 11.1.16-h3 or later.\n                            \n                                \n                                11.1.11 through 11.1.13-h*\n\n                                Upgrade to 11.1.13-h15 or 11.1.16-h3 or later.\n                            \n                                \n                                11.1.8 through 11.1.10-h*\n                                Upgrade to 11.1.10-h35 or 11.1.16-h3 or later.\n                            \n                                \n                                11.1.7 through 11.1.7-h*\n                                Upgrade to 11.1.7-h11 or 11.1.16-h3 or later.\n                            \n                                \n                                11.1.5 through 11.1.6-h*\n                                Upgrade to 11.1.6-h39 or 11.1.16-h3 or later.\n                            \n                                \n                                11.1.0 through 11.1.4-h*\n                                Upgrade to 11.1.4-h37 or 11.1.16-h3 or later.\n                            \n                                PAN-OS 10.2\n\n                                10.2.17 through 10.2.18-h*\n                                Upgrade to 10.2.18-h12 or later.\n                            \n                                \n                                10.2.14 through 10.2.16-h*\n                                Upgrade to 10.2.16-h11 or 10.2.18-h12 or later.\n                            \n                                \n                                10.2.11 through 10.2.13-h*\n                                Upgrade to 10.2.13-h26 or 10.2.18-h12 or later.\n                            \n                                \n                                10.2.8 through 10.2.10-h*\n                                Upgrade to 10.2.10-h41 or 10.2.18-h12 or later.\n                            \n                                \n                                10.2.0 through 10.2.7-h*\n                                Upgrade to 10.2.7-h38 or 10.2.18-h12 or later."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-14T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "PAN-OS: Authenticated Admin Command Injection Vulnerability",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNo known workarounds exist for this issue.\u003c/p\u003e\u003cp\u003eCustomers with a Threat Prevention subscription are provided with limited coverage against this vulnerability by enabling Threat ID 510044\u0026nbsp;and 510049 (from Applications and Threats content version 9159-10287 and later). Please note that this Threat ID requires SSL Decryption.\u003c/p\u003e"
            }
          ],
          "value": "No known workarounds exist for this issue.\n\n\n\nCustomers with a Threat Prevention subscription are provided with limited coverage against this vulnerability by enabling Threat ID 510044\u00a0and 510049 (from Applications and Threats content version 9159-10287 and later). Please note that this Threat ID requires SSL Decryption."
        }
      ],
      "x_affectedList": [
        "PAN-OS 12.2.3",
        "PAN-OS 12.2.2",
        "PAN-OS 12.1.10",
        "PAN-OS 12.1.9",
        "PAN-OS 12.1.8",
        "PAN-OS 12.1.7-h6",
        "PAN-OS 12.1.7-h5",
        "PAN-OS 12.1.7-h3",
        "PAN-OS 12.1.7-h2",
        "PAN-OS 12.1.7-h1",
        "PAN-OS 12.1.7",
        "PAN-OS 12.1.6",
        "PAN-OS 12.1.5",
        "PAN-OS 12.1.4-h11",
        "PAN-OS 12.1.4-h10",
        "PAN-OS 12.1.4-h9",
        "PAN-OS 12.1.4-h8",
        "PAN-OS 12.1.4-h7",
        "PAN-OS 12.1.4-h6",
        "PAN-OS 12.1.4-h5",
        "PAN-OS 12.1.4-h3",
        "PAN-OS 12.1.4-h2",
        "PAN-OS 12.1.4",
        "PAN-OS 12.1.3-h3",
        "PAN-OS 12.1.3-h1",
        "PAN-OS 12.1.3",
        "PAN-OS 12.1.2",
        "PAN-OS 11.2.15",
        "PAN-OS 11.2.13-h2",
        "PAN-OS 11.2.13-h1",
        "PAN-OS 11.2.13",
        "PAN-OS 11.2.12",
        "PAN-OS 11.2.11",
        "PAN-OS 11.2.10-h14",
        "PAN-OS 11.2.10-h13",
        "PAN-OS 11.2.10-h12",
        "PAN-OS 11.2.10-h10",
        "PAN-OS 11.2.10-h9",
        "PAN-OS 11.2.10-h8",
        "PAN-OS 11.2.10-h7",
        "PAN-OS 11.2.10-h6",
        "PAN-OS 11.2.10-h5",
        "PAN-OS 11.2.10-h4",
        "PAN-OS 11.2.10-h3",
        "PAN-OS 11.2.10-h2",
        "PAN-OS 11.2.10-h1",
        "PAN-OS 11.2.10",
        "PAN-OS 11.2.9",
        "PAN-OS 11.2.8",
        "PAN-OS 11.2.7-h20",
        "PAN-OS 11.2.7-h19",
        "PAN-OS 11.2.7-h18",
        "PAN-OS 11.2.7-h17",
        "PAN-OS 11.2.7-h16",
        "PAN-OS 11.2.7-h15",
        "PAN-OS 11.2.7-h14",
        "PAN-OS 11.2.7-h13",
        "PAN-OS 11.2.7-h12",
        "PAN-OS 11.2.7-h11",
        "PAN-OS 11.2.7-h10",
        "PAN-OS 11.2.7-h8",
        "PAN-OS 11.2.7-h7",
        "PAN-OS 11.2.7-h4",
        "PAN-OS 11.2.7-h3",
        "PAN-OS 11.2.7-h2",
        "PAN-OS 11.2.7-h1",
        "PAN-OS 11.2.7",
        "PAN-OS 11.2.6",
        "PAN-OS 11.2.5",
        "PAN-OS 11.2.4-h21",
        "PAN-OS 11.2.4-h20",
        "PAN-OS 11.2.4-h18",
        "PAN-OS 11.2.4-h17",
        "PAN-OS 11.2.4-h15",
        "PAN-OS 11.2.4-h14",
        "PAN-OS 11.2.4-h12",
        "PAN-OS 11.2.4-h11",
        "PAN-OS 11.2.4-h10",
        "PAN-OS 11.2.4-h9",
        "PAN-OS 11.2.4-h8",
        "PAN-OS 11.2.4-h7",
        "PAN-OS 11.2.4-h6",
        "PAN-OS 11.2.4-h5",
        "PAN-OS 11.2.4-h4",
        "PAN-OS 11.2.4-h3",
        "PAN-OS 11.2.4-h2",
        "PAN-OS 11.2.4-h1",
        "PAN-OS 11.2.4",
        "PAN-OS 11.2.3-h5",
        "PAN-OS 11.2.3-h4",
        "PAN-OS 11.2.3-h3",
        "PAN-OS 11.2.3-h2",
        "PAN-OS 11.2.3-h1",
        "PAN-OS 11.2.3",
        "PAN-OS 11.2.2-h2",
        "PAN-OS 11.2.2-h1",
        "PAN-OS 11.2.1-h1",
        "PAN-OS 11.2.1",
        "PAN-OS 11.2.0-h1",
        "PAN-OS 11.2.0",
        "PAN-OS 11.1.16-h2",
        "PAN-OS 11.1.16-h1",
        "PAN-OS 11.1.16",
        "PAN-OS 11.1.15",
        "PAN-OS 11.1.14",
        "PAN-OS 11.1.13-h12",
        "PAN-OS 11.1.13-h11",
        "PAN-OS 11.1.13-h10",
        "PAN-OS 11.1.13-h9",
        "PAN-OS 11.1.13-h8",
        "PAN-OS 11.1.13-h7",
        "PAN-OS 11.1.13-h6",
        "PAN-OS 11.1.13-h5",
        "PAN-OS 11.1.13-h3",
        "PAN-OS 11.1.13-h2",
        "PAN-OS 11.1.13-h1",
        "PAN-OS 11.1.13",
        "PAN-OS 11.1.12",
        "PAN-OS 11.1.11",
        "PAN-OS 11.1.10-h33",
        "PAN-OS 11.1.10-h32",
        "PAN-OS 11.1.10-h30",
        "PAN-OS 11.1.10-h28",
        "PAN-OS 11.1.10-h27",
        "PAN-OS 11.1.10-h26",
        "PAN-OS 11.1.10-h25",
        "PAN-OS 11.1.10-h21",
        "PAN-OS 11.1.10-h12",
        "PAN-OS 11.1.10-h10",
        "PAN-OS 11.1.10-h9",
        "PAN-OS 11.1.10-h7",
        "PAN-OS 11.1.10-h5",
        "PAN-OS 11.1.10-h4",
        "PAN-OS 11.1.10-h1",
        "PAN-OS 11.1.10",
        "PAN-OS 11.1.9",
        "PAN-OS 11.1.8",
        "PAN-OS 11.1.6-h38",
        "PAN-OS 11.1.6-h36",
        "PAN-OS 11.1.6-h35",
        "PAN-OS 11.1.6-h34",
        "PAN-OS 11.1.6-h33",
        "PAN-OS 11.1.6-h32",
        "PAN-OS 11.1.6-h29",
        "PAN-OS 11.1.6-h25",
        "PAN-OS 11.1.6-h23",
        "PAN-OS 11.1.6-h22",
        "PAN-OS 11.1.6-h21",
        "PAN-OS 11.1.6-h20",
        "PAN-OS 11.1.6-h19",
        "PAN-OS 11.1.6-h18",
        "PAN-OS 11.1.6-h17",
        "PAN-OS 11.1.6-h14",
        "PAN-OS 11.1.6-h10",
        "PAN-OS 11.1.6-h7",
        "PAN-OS 11.1.6-h6",
        "PAN-OS 11.1.6-h4",
        "PAN-OS 11.1.6-h3",
        "PAN-OS 11.1.6-h2",
        "PAN-OS 11.1.6-h1",
        "PAN-OS 11.1.6",
        "PAN-OS 11.1.5-h1",
        "PAN-OS 11.1.5",
        "PAN-OS 11.1.4-h36",
        "PAN-OS 11.1.4-h35",
        "PAN-OS 11.1.4-h34",
        "PAN-OS 11.1.4-h33",
        "PAN-OS 11.1.4-h32",
        "PAN-OS 11.1.4-h27",
        "PAN-OS 11.1.4-h25",
        "PAN-OS 11.1.4-h18",
        "PAN-OS 11.1.4-h17",
        "PAN-OS 11.1.4-h15",
        "PAN-OS 11.1.4-h13",
        "PAN-OS 11.1.4-h12",
        "PAN-OS 11.1.4-h11",
        "PAN-OS 11.1.4-h10",
        "PAN-OS 11.1.4-h9",
        "PAN-OS 11.1.4-h8",
        "PAN-OS 11.1.4-h7",
        "PAN-OS 11.1.4-h6",
        "PAN-OS 11.1.4-h5",
        "PAN-OS 11.1.4-h4",
        "PAN-OS 11.1.4-h3",
        "PAN-OS 11.1.4-h2",
        "PAN-OS 11.1.4-h1",
        "PAN-OS 11.1.4",
        "PAN-OS 11.1.3-h13",
        "PAN-OS 11.1.3-h12",
        "PAN-OS 11.1.3-h11",
        "PAN-OS 11.1.3-h10",
        "PAN-OS 11.1.3-h9",
        "PAN-OS 11.1.3-h8",
        "PAN-OS 11.1.3-h7",
        "PAN-OS 11.1.3-h6",
        "PAN-OS 11.1.3-h5",
        "PAN-OS 11.1.3-h4",
        "PAN-OS 11.1.3-h3",
        "PAN-OS 11.1.3-h2",
        "PAN-OS 11.1.3-h1",
        "PAN-OS 11.1.3",
        "PAN-OS 11.1.2-h18",
        "PAN-OS 11.1.2-h17",
        "PAN-OS 11.1.2-h16",
        "PAN-OS 11.1.2-h15",
        "PAN-OS 11.1.2-h14",
        "PAN-OS 11.1.2-h13",
        "PAN-OS 11.1.2-h12",
        "PAN-OS 11.1.2-h11",
        "PAN-OS 11.1.2-h10",
        "PAN-OS 11.1.2-h9",
        "PAN-OS 11.1.2-h8",
        "PAN-OS 11.1.2-h7",
        "PAN-OS 11.1.2-h6",
        "PAN-OS 11.1.2-h5",
        "PAN-OS 11.1.2-h4",
        "PAN-OS 11.1.2-h3",
        "PAN-OS 11.1.2-h2",
        "PAN-OS 11.1.2-h1",
        "PAN-OS 11.1.2",
        "PAN-OS 11.1.1-h2",
        "PAN-OS 11.1.1-h1",
        "PAN-OS 11.1.1",
        "PAN-OS 11.1.0-h4",
        "PAN-OS 11.1.0-h3",
        "PAN-OS 11.1.0-h2",
        "PAN-OS 11.1.0-h1",
        "PAN-OS 11.1.0",
        "PAN-OS 10.2.18-h10",
        "PAN-OS 10.2.18-h9",
        "PAN-OS 10.2.18-h8",
        "PAN-OS 10.2.18-h7",
        "PAN-OS 10.2.18-h6",
        "PAN-OS 10.2.18-h5",
        "PAN-OS 10.2.18-h1",
        "PAN-OS 10.2.18",
        "PAN-OS 10.2.17",
        "PAN-OS 10.2.16-h10",
        "PAN-OS 10.2.16-h9",
        "PAN-OS 10.2.16-h8",
        "PAN-OS 10.2.16-h7",
        "PAN-OS 10.2.16-h6",
        "PAN-OS 10.2.16-h4",
        "PAN-OS 10.2.16-h1",
        "PAN-OS 10.2.16",
        "PAN-OS 10.2.15",
        "PAN-OS 10.2.14-h1",
        "PAN-OS 10.2.14",
        "PAN-OS 10.2.13-h24",
        "PAN-OS 10.2.13-h23",
        "PAN-OS 10.2.13-h22",
        "PAN-OS 10.2.13-h21",
        "PAN-OS 10.2.13-h18",
        "PAN-OS 10.2.13-h16",
        "PAN-OS 10.2.13-h15",
        "PAN-OS 10.2.13-h10",
        "PAN-OS 10.2.13-h7",
        "PAN-OS 10.2.13-h5",
        "PAN-OS 10.2.13-h4",
        "PAN-OS 10.2.13-h3",
        "PAN-OS 10.2.13-h2",
        "PAN-OS 10.2.13-h1",
        "PAN-OS 10.2.13",
        "PAN-OS 10.2.12-h6",
        "PAN-OS 10.2.12-h5",
        "PAN-OS 10.2.12-h4",
        "PAN-OS 10.2.12-h3",
        "PAN-OS 10.2.12-h2",
        "PAN-OS 10.2.12-h1",
        "PAN-OS 10.2.12",
        "PAN-OS 10.2.11-h13",
        "PAN-OS 10.2.11-h12",
        "PAN-OS 10.2.11-h11",
        "PAN-OS 10.2.11-h10",
        "PAN-OS 10.2.11-h9",
        "PAN-OS 10.2.11-h8",
        "PAN-OS 10.2.11-h7",
        "PAN-OS 10.2.11-h6",
        "PAN-OS 10.2.11-h5",
        "PAN-OS 10.2.11-h4",
        "PAN-OS 10.2.11-h3",
        "PAN-OS 10.2.11-h2",
        "PAN-OS 10.2.11-h1",
        "PAN-OS 10.2.11",
        "PAN-OS 10.2.10-h40",
        "PAN-OS 10.2.10-h39",
        "PAN-OS 10.2.10-h37",
        "PAN-OS 10.2.10-h36",
        "PAN-OS 10.2.10-h31",
        "PAN-OS 10.2.10-h30",
        "PAN-OS 10.2.10-h27",
        "PAN-OS 10.2.10-h26",
        "PAN-OS 10.2.10-h23",
        "PAN-OS 10.2.10-h21",
        "PAN-OS 10.2.10-h18",
        "PAN-OS 10.2.10-h17",
        "PAN-OS 10.2.10-h14",
        "PAN-OS 10.2.10-h13",
        "PAN-OS 10.2.10-h12",
        "PAN-OS 10.2.10-h11",
        "PAN-OS 10.2.10-h10",
        "PAN-OS 10.2.10-h9",
        "PAN-OS 10.2.10-h8",
        "PAN-OS 10.2.10-h7",
        "PAN-OS 10.2.10-h6",
        "PAN-OS 10.2.10-h5",
        "PAN-OS 10.2.10-h4",
        "PAN-OS 10.2.10-h3",
        "PAN-OS 10.2.10-h2",
        "PAN-OS 10.2.10-h1",
        "PAN-OS 10.2.10",
        "PAN-OS 10.2.9-h21",
        "PAN-OS 10.2.9-h20",
        "PAN-OS 10.2.9-h19",
        "PAN-OS 10.2.9-h18",
        "PAN-OS 10.2.9-h17",
        "PAN-OS 10.2.9-h16",
        "PAN-OS 10.2.9-h15",
        "PAN-OS 10.2.9-h14",
        "PAN-OS 10.2.9-h13",
        "PAN-OS 10.2.9-h12",
        "PAN-OS 10.2.9-h11",
        "PAN-OS 10.2.9-h10",
        "PAN-OS 10.2.9-h9",
        "PAN-OS 10.2.9-h8",
        "PAN-OS 10.2.9-h7",
        "PAN-OS 10.2.9-h6",
        "PAN-OS 10.2.9-h5",
        "PAN-OS 10.2.9-h4",
        "PAN-OS 10.2.9-h3",
        "PAN-OS 10.2.9-h2",
        "PAN-OS 10.2.9-h1",
        "PAN-OS 10.2.9",
        "PAN-OS 10.2.8-h21",
        "PAN-OS 10.2.8-h20",
        "PAN-OS 10.2.8-h19",
        "PAN-OS 10.2.8-h18",
        "PAN-OS 10.2.8-h17",
        "PAN-OS 10.2.8-h16",
        "PAN-OS 10.2.8-h15",
        "PAN-OS 10.2.8-h14",
        "PAN-OS 10.2.8-h13",
        "PAN-OS 10.2.8-h12",
        "PAN-OS 10.2.8-h11",
        "PAN-OS 10.2.8-h10",
        "PAN-OS 10.2.8-h9",
        "PAN-OS 10.2.8-h8",
        "PAN-OS 10.2.8-h7",
        "PAN-OS 10.2.8-h6",
        "PAN-OS 10.2.8-h5",
        "PAN-OS 10.2.8-h4",
        "PAN-OS 10.2.8-h3",
        "PAN-OS 10.2.8-h2",
        "PAN-OS 10.2.8-h1",
        "PAN-OS 10.2.8",
        "PAN-OS 10.2.7-h37",
        "PAN-OS 10.2.7-h36",
        "PAN-OS 10.2.7-h35",
        "PAN-OS 10.2.7-h34",
        "PAN-OS 10.2.7-h32",
        "PAN-OS 10.2.7-h24",
        "PAN-OS 10.2.7-h23",
        "PAN-OS 10.2.7-h22",
        "PAN-OS 10.2.7-h21",
        "PAN-OS 10.2.7-h20",
        "PAN-OS 10.2.7-h19",
        "PAN-OS 10.2.7-h18",
        "PAN-OS 10.2.7-h17",
        "PAN-OS 10.2.7-h16",
        "PAN-OS 10.2.7-h15",
        "PAN-OS 10.2.7-h14",
        "PAN-OS 10.2.7-h13",
        "PAN-OS 10.2.7-h12",
        "PAN-OS 10.2.7-h11",
        "PAN-OS 10.2.7-h10",
        "PAN-OS 10.2.7-h9",
        "PAN-OS 10.2.7-h8",
        "PAN-OS 10.2.7-h7",
        "PAN-OS 10.2.7-h6",
        "PAN-OS 10.2.7-h5",
        "PAN-OS 10.2.7-h4",
        "PAN-OS 10.2.7-h3",
        "PAN-OS 10.2.7-h2",
        "PAN-OS 10.2.7-h1",
        "PAN-OS 10.2.7",
        "PAN-OS 10.2.6-h6",
        "PAN-OS 10.2.6-h5",
        "PAN-OS 10.2.6-h4",
        "PAN-OS 10.2.6-h3",
        "PAN-OS 10.2.6-h2",
        "PAN-OS 10.2.6-h1",
        "PAN-OS 10.2.6",
        "PAN-OS 10.2.5-h9",
        "PAN-OS 10.2.5-h8",
        "PAN-OS 10.2.5-h7",
        "PAN-OS 10.2.5-h6",
        "PAN-OS 10.2.5-h5",
        "PAN-OS 10.2.5-h4",
        "PAN-OS 10.2.5-h3",
        "PAN-OS 10.2.5-h2",
        "PAN-OS 10.2.5-h1",
        "PAN-OS 10.2.5",
        "PAN-OS 10.2.4-h32",
        "PAN-OS 10.2.4-h31",
        "PAN-OS 10.2.4-h30",
        "PAN-OS 10.2.4-h29",
        "PAN-OS 10.2.4-h28",
        "PAN-OS 10.2.4-h27",
        "PAN-OS 10.2.4-h26",
        "PAN-OS 10.2.4-h25",
        "PAN-OS 10.2.4-h24",
        "PAN-OS 10.2.4-h23",
        "PAN-OS 10.2.4-h22",
        "PAN-OS 10.2.4-h21",
        "PAN-OS 10.2.4-h20",
        "PAN-OS 10.2.4-h19",
        "PAN-OS 10.2.4-h18",
        "PAN-OS 10.2.4-h17",
        "PAN-OS 10.2.4-h16",
        "PAN-OS 10.2.4-h15",
        "PAN-OS 10.2.4-h14",
        "PAN-OS 10.2.4-h13",
        "PAN-OS 10.2.4-h12",
        "PAN-OS 10.2.4-h11",
        "PAN-OS 10.2.4-h10",
        "PAN-OS 10.2.4-h9",
        "PAN-OS 10.2.4-h8",
        "PAN-OS 10.2.4-h7",
        "PAN-OS 10.2.4-h6",
        "PAN-OS 10.2.4-h5",
        "PAN-OS 10.2.4-h4",
        "PAN-OS 10.2.4-h3",
        "PAN-OS 10.2.4-h2",
        "PAN-OS 10.2.4-h1",
        "PAN-OS 10.2.4",
        "PAN-OS 10.2.3-h14",
        "PAN-OS 10.2.3-h13",
        "PAN-OS 10.2.3-h12",
        "PAN-OS 10.2.3-h11",
        "PAN-OS 10.2.3-h10",
        "PAN-OS 10.2.3-h9",
        "PAN-OS 10.2.3-h8",
        "PAN-OS 10.2.3-h7",
        "PAN-OS 10.2.3-h6",
        "PAN-OS 10.2.3-h5",
        "PAN-OS 10.2.3-h4",
        "PAN-OS 10.2.3-h3",
        "PAN-OS 10.2.3-h2",
        "PAN-OS 10.2.3-h1",
        "PAN-OS 10.2.3",
        "PAN-OS 10.2.2-h6",
        "PAN-OS 10.2.2-h5",
        "PAN-OS 10.2.2-h4",
        "PAN-OS 10.2.2-h3",
        "PAN-OS 10.2.2-h2",
        "PAN-OS 10.2.2-h1",
        "PAN-OS 10.2.2",
        "PAN-OS 10.2.1-h3",
        "PAN-OS 10.2.1-h2",
        "PAN-OS 10.2.1-h1",
        "PAN-OS 10.2.1",
        "PAN-OS 10.2.0-h4",
        "PAN-OS 10.2.0-h3",
        "PAN-OS 10.2.0-h2",
        "PAN-OS 10.2.0-h1",
        "PAN-OS 10.2.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0320",
    "datePublished": "2026-10-14T20:09:49.697Z",
    "dateReserved": "2025-11-03T20:45:18.580Z",
    "dateUpdated": "2026-10-16T03:56:59.391Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-0319 (GCVE-0-2026-0319)

    Vulnerability from nvd – Published: 2026-10-14 20:15 – Updated: 2026-10-15 18:53
    VLAI
    Title
    PAN-OS: Improper Input Handling Vulnerability
    Summary
    An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user. Cloud NGFW and Panorama are not affected by this vulnerability.
    Severity
    4.9 (Medium)
    CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-15 18:48 UTC
    CWE
    • CWE-754 - Improper Check for Unusual or Exceptional Conditions
    Assigner
    palo_alto CNA under the mitre root
    CNA scorecard A 95/100 over 96 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Palo Alto Networks Cloud NGFW Unaffected: All (custom)
    		Create a notification for this product.
    Palo Alto Networks PAN-OS Affected: 12.2.0 , < 12.2.4 (custom)
    Affected: 12.1.0 , < 12.1.10-h2 (custom)
    Affected: 11.2.0 , < 11.2.16 (custom)
    Affected: 11.1.0 , < 11.1.16-h3 (custom)
    Affected: 10.2.0 , < 10.2.18-h12 (custom)
        cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h33:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h32:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h30:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h28:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h27:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h26:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h25:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h38:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h36:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h35:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h34:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h33:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h32:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h36:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h35:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h34:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h33:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h25:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h24:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h23:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h22:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h40:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h39:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h37:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h36:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h37:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h36:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h35:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h34:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h32:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h24:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h23:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h22:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h20:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h19:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h16:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*
    		Create a notification for this product.
    Palo Alto Networks Prisma Access Affected: 12.1.0 , < 12.1.7-h8 (custom)
    Affected: 11.2.0 , < 11.2.7-h21 (custom)
    Affected: 10.2.0 , < 10.2.10-h41 (custom)
        cpe:2.3:a:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:*
        cpe:2.3:a:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:*
        cpe:2.3:a:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Date Public
    2026-10-14 16:00
    Credits
    Ben Nott (internal reporter)
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0319",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T18:48:44.598382Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T18:53:43.155Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Cloud NGFW",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h33:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h32:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h30:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h28:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h27:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h26:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h25:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h38:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h35:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h34:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h33:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h32:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h35:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h34:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h33:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h25:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h24:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h22:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h40:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h39:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h37:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h37:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h35:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h34:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h32:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h24:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h22:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h20:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h19:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h16:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "PAN-OS",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.2.4",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.2.4",
              "status": "affected",
              "version": "12.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "12.1.10-h2",
                  "status": "unaffected"
                },
                {
                  "at": "12.1.7-h8",
                  "status": "unaffected"
                },
                {
                  "at": "12.1.4-h12",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.1.10-h2",
              "status": "affected",
              "version": "12.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.2.16",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.13-h3",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.10-h15",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.7-h21",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.4-h22",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.2.16",
              "status": "affected",
              "version": "11.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.1.16-h3",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.13-h15",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.10-h35",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.7-h11",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.6-h39",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.4-h37",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.1.16-h3",
              "status": "affected",
              "version": "11.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "10.2.18-h12",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.16-h11",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.13-h26",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.10-h41",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.7-h38",
                  "status": "unaffected"
                }
              ],
              "lessThan": "10.2.18-h12",
              "status": "affected",
              "version": "10.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Prisma Access",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.1.7-h8",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.1.7-h8",
              "status": "affected",
              "version": "12.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.2.7-h21",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.2.7-h21",
              "status": "affected",
              "version": "11.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "10.2.10-h41",
                  "status": "unaffected"
                }
              ],
              "lessThan": "10.2.10-h41",
              "status": "affected",
              "version": "10.2.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cspan\u003eNo special configuration is required to be affected by this issue.\u003c/span\u003e\u003c/p\u003e"
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:cloud_ngfw:all:*:*:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.2.4",
                  "versionStartIncluding": "12.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.1.10-h2",
                  "versionStartIncluding": "12.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.2.16",
                  "versionStartIncluding": "11.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.1.16-h3",
                  "versionStartIncluding": "11.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.2.18-h12",
                  "versionStartIncluding": "10.2.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.1.7-h8",
                  "versionStartIncluding": "12.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.2.7-h21",
                  "versionStartIncluding": "11.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.2.10-h41",
                  "versionStartIncluding": "10.2.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Ben Nott (internal reporter)"
        }
      ],
      "datePublic": "2026-10-14T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cspan\u003eAn improper input handling vulnerability in the GlobalProtect\u2122 gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user. \u003c/span\u003e\u003cb\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003c/b\u003e\u003cspan\u003eCloud NGFW and Panorama are not affected by this vulnerability.\u003c/span\u003e  \u003cbr\u003e\u003c/p\u003e"
            }
          ],
          "value": "An improper input handling vulnerability in the GlobalProtect\u2122 gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user. \n\nCloud NGFW and Panorama are not affected by this vulnerability."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-153",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-153 Input Data Manipulation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-754",
              "description": "CWE-754 Improper Check for Unusual or Exceptional Conditions",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T20:15:32.174Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "name": "PAN-OS Security Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0319"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 12.2\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.2.0 through 12.2.3\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.2.4 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 12.1\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.1.8 through 12.1.10-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.1.10-h2 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.1.5 through 12.1.7-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.1.7-h8 or 12.1.10-h2 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.1.2 through 12.1.4-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.1.4-h12 or 12.1.10-h2 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 11.2\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.14 through 11.2.15\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.11 through 11.2.13-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.13-h3 or 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.8 through 11.2.10-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.10-h15 or 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.5 through 11.2.7-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.7-h21 or 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.0 through 11.2.4-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.4-h22 or 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 11.1\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.14 through 11.1.16-h* \u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.11 through 11.1.13-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.13-h15 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.8 through 11.1.10-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.10-h35 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.7 through 11.1.7-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.7-h11 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.5 through 11.1.6-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.6-h39 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.0 through 11.1.4-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.4-h37 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 10.2\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.17 through 10.2.18-h* \u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.14 through 10.2.16-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.16-h11 or 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.11 through 10.2.13-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.13-h26 or 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.8 through 10.2.10-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.10-h41 or 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.0 through 10.2.7-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.7-h38 or 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003ePrisma Access needs to be upgraded in accordance with product status table"
            }
          ],
          "value": "Version\nMinor Version\nSuggested Solution\n\n                                PAN-OS 12.2\n\n                                12.2.0 through 12.2.3\n                                Upgrade to 12.2.4 or later.\n                            \n                                PAN-OS 12.1\n\n                                12.1.8 through 12.1.10-h*\n                                Upgrade to 12.1.10-h2 or later.\n                            \n                                \n                                12.1.5 through 12.1.7-h*\n                                Upgrade to 12.1.7-h8 or 12.1.10-h2 or later.\n                            \n                                \n                                12.1.2 through 12.1.4-h*\n                                Upgrade to 12.1.4-h12 or 12.1.10-h2 or later.\n                            \n                                PAN-OS 11.2\n\n                                11.2.14 through 11.2.15\n                                Upgrade to 11.2.16 or later.\n                            \n                                \n                                11.2.11 through 11.2.13-h*\n                                Upgrade to 11.2.13-h3 or 11.2.16 or later.\n                            \n                                \n                                11.2.8 through 11.2.10-h*\n                                Upgrade to 11.2.10-h15 or 11.2.16 or later.\n                            \n                                \n                                11.2.5 through 11.2.7-h*\n                                Upgrade to 11.2.7-h21 or 11.2.16 or later.\n                            \n                                \n                                11.2.0 through 11.2.4-h*\n                                Upgrade to 11.2.4-h22 or 11.2.16 or later.\n                            \n                                PAN-OS 11.1\n\n                                11.1.14 through 11.1.16-h* \n                                Upgrade to 11.1.16-h3 or later.\n                            \n                                \n                                11.1.11 through 11.1.13-h*\n                                Upgrade to 11.1.13-h15 or 11.1.16-h3 or later.\n                            \n                                \n                                11.1.8 through 11.1.10-h*\n                                Upgrade to 11.1.10-h35 or 11.1.16-h3 or later.\n                            \n                                \n                                11.1.7 through 11.1.7-h*\n                                Upgrade to 11.1.7-h11 or 11.1.16-h3 or later.\n                            \n                                \n                                11.1.5 through 11.1.6-h*\n                                Upgrade to 11.1.6-h39 or 11.1.16-h3 or later.\n                            \n                                \n                                11.1.0 through 11.1.4-h*\n                                Upgrade to 11.1.4-h37 or 11.1.16-h3 or later.\n                            \n                                PAN-OS 10.2\n\n                                10.2.17 through 10.2.18-h* \n                                Upgrade to 10.2.18-h12 or later.\n                            \n                                \n                                10.2.14 through 10.2.16-h*\n                                Upgrade to 10.2.16-h11 or 10.2.18-h12 or later.\n                            \n                                \n                                10.2.11 through 10.2.13-h*\n                                Upgrade to 10.2.13-h26 or 10.2.18-h12 or later.\n                            \n                                \n                                10.2.8 through 10.2.10-h*\n                                Upgrade to 10.2.10-h41 or 10.2.18-h12 or later.\n                            \n                                \n                                10.2.0 through 10.2.7-h*\n                                Upgrade to 10.2.7-h38 or 10.2.18-h12 or later.\n                            Prisma Access needs to be upgraded in accordance with product status table"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-14T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "PAN-OS: Improper Input Handling Vulnerability",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNo known workarounds exist for this issue.\u0026nbsp;\u003c/p\u003e"
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_affectedList": [
        "PAN-OS 12.2.3",
        "PAN-OS 12.2.2",
        "PAN-OS 12.1.10",
        "PAN-OS 12.1.9",
        "PAN-OS 12.1.8",
        "PAN-OS 12.1.7-h6",
        "PAN-OS 12.1.7-h5",
        "PAN-OS 12.1.7-h3",
        "PAN-OS 12.1.7-h2",
        "PAN-OS 12.1.7-h1",
        "PAN-OS 12.1.7",
        "PAN-OS 12.1.6",
        "PAN-OS 12.1.5",
        "PAN-OS 12.1.4-h11",
        "PAN-OS 12.1.4-h10",
        "PAN-OS 12.1.4-h9",
        "PAN-OS 12.1.4-h8",
        "PAN-OS 12.1.4-h7",
        "PAN-OS 12.1.4-h6",
        "PAN-OS 12.1.4-h5",
        "PAN-OS 12.1.4-h3",
        "PAN-OS 12.1.4-h2",
        "PAN-OS 12.1.4",
        "PAN-OS 12.1.3-h3",
        "PAN-OS 12.1.3-h1",
        "PAN-OS 12.1.3",
        "PAN-OS 12.1.2",
        "PAN-OS 11.2.15",
        "PAN-OS 11.2.13-h2",
        "PAN-OS 11.2.13-h1",
        "PAN-OS 11.2.13",
        "PAN-OS 11.2.12",
        "PAN-OS 11.2.11",
        "PAN-OS 11.2.10-h14",
        "PAN-OS 11.2.10-h13",
        "PAN-OS 11.2.10-h12",
        "PAN-OS 11.2.10-h10",
        "PAN-OS 11.2.10-h9",
        "PAN-OS 11.2.10-h8",
        "PAN-OS 11.2.10-h7",
        "PAN-OS 11.2.10-h6",
        "PAN-OS 11.2.10-h5",
        "PAN-OS 11.2.10-h4",
        "PAN-OS 11.2.10-h3",
        "PAN-OS 11.2.10-h2",
        "PAN-OS 11.2.10-h1",
        "PAN-OS 11.2.10",
        "PAN-OS 11.2.9",
        "PAN-OS 11.2.8",
        "PAN-OS 11.2.7-h20",
        "PAN-OS 11.2.7-h19",
        "PAN-OS 11.2.7-h18",
        "PAN-OS 11.2.7-h17",
        "PAN-OS 11.2.7-h16",
        "PAN-OS 11.2.7-h15",
        "PAN-OS 11.2.7-h14",
        "PAN-OS 11.2.7-h13",
        "PAN-OS 11.2.7-h12",
        "PAN-OS 11.2.7-h11",
        "PAN-OS 11.2.7-h10",
        "PAN-OS 11.2.7-h8",
        "PAN-OS 11.2.7-h7",
        "PAN-OS 11.2.7-h4",
        "PAN-OS 11.2.7-h3",
        "PAN-OS 11.2.7-h2",
        "PAN-OS 11.2.7-h1",
        "PAN-OS 11.2.7",
        "PAN-OS 11.2.6",
        "PAN-OS 11.2.5",
        "PAN-OS 11.2.4-h21",
        "PAN-OS 11.2.4-h20",
        "PAN-OS 11.2.4-h18",
        "PAN-OS 11.2.4-h17",
        "PAN-OS 11.2.4-h15",
        "PAN-OS 11.2.4-h14",
        "PAN-OS 11.2.4-h12",
        "PAN-OS 11.2.4-h11",
        "PAN-OS 11.2.4-h10",
        "PAN-OS 11.2.4-h9",
        "PAN-OS 11.2.4-h8",
        "PAN-OS 11.2.4-h7",
        "PAN-OS 11.2.4-h6",
        "PAN-OS 11.2.4-h5",
        "PAN-OS 11.2.4-h4",
        "PAN-OS 11.2.4-h3",
        "PAN-OS 11.2.4-h2",
        "PAN-OS 11.2.4-h1",
        "PAN-OS 11.2.4",
        "PAN-OS 11.2.3-h5",
        "PAN-OS 11.2.3-h4",
        "PAN-OS 11.2.3-h3",
        "PAN-OS 11.2.3-h2",
        "PAN-OS 11.2.3-h1",
        "PAN-OS 11.2.3",
        "PAN-OS 11.2.2-h2",
        "PAN-OS 11.2.2-h1",
        "PAN-OS 11.2.1-h1",
        "PAN-OS 11.2.1",
        "PAN-OS 11.2.0-h1",
        "PAN-OS 11.2.0",
        "PAN-OS 11.1.16-h2",
        "PAN-OS 11.1.16-h1",
        "PAN-OS 11.1.16",
        "PAN-OS 11.1.15",
        "PAN-OS 11.1.14",
        "PAN-OS 11.1.13-h12",
        "PAN-OS 11.1.13-h11",
        "PAN-OS 11.1.13-h10",
        "PAN-OS 11.1.13-h9",
        "PAN-OS 11.1.13-h8",
        "PAN-OS 11.1.13-h7",
        "PAN-OS 11.1.13-h6",
        "PAN-OS 11.1.13-h5",
        "PAN-OS 11.1.13-h3",
        "PAN-OS 11.1.13-h2",
        "PAN-OS 11.1.13-h1",
        "PAN-OS 11.1.13",
        "PAN-OS 11.1.12",
        "PAN-OS 11.1.11",
        "PAN-OS 11.1.10-h33",
        "PAN-OS 11.1.10-h32",
        "PAN-OS 11.1.10-h30",
        "PAN-OS 11.1.10-h28",
        "PAN-OS 11.1.10-h27",
        "PAN-OS 11.1.10-h26",
        "PAN-OS 11.1.10-h25",
        "PAN-OS 11.1.10-h21",
        "PAN-OS 11.1.10-h12",
        "PAN-OS 11.1.10-h10",
        "PAN-OS 11.1.10-h9",
        "PAN-OS 11.1.10-h7",
        "PAN-OS 11.1.10-h5",
        "PAN-OS 11.1.10-h4",
        "PAN-OS 11.1.10-h1",
        "PAN-OS 11.1.10",
        "PAN-OS 11.1.9",
        "PAN-OS 11.1.8",
        "PAN-OS 11.1.6-h38",
        "PAN-OS 11.1.6-h36",
        "PAN-OS 11.1.6-h35",
        "PAN-OS 11.1.6-h34",
        "PAN-OS 11.1.6-h33",
        "PAN-OS 11.1.6-h32",
        "PAN-OS 11.1.6-h29",
        "PAN-OS 11.1.6-h25",
        "PAN-OS 11.1.6-h23",
        "PAN-OS 11.1.6-h22",
        "PAN-OS 11.1.6-h21",
        "PAN-OS 11.1.6-h20",
        "PAN-OS 11.1.6-h19",
        "PAN-OS 11.1.6-h18",
        "PAN-OS 11.1.6-h17",
        "PAN-OS 11.1.6-h14",
        "PAN-OS 11.1.6-h10",
        "PAN-OS 11.1.6-h7",
        "PAN-OS 11.1.6-h6",
        "PAN-OS 11.1.6-h4",
        "PAN-OS 11.1.6-h3",
        "PAN-OS 11.1.6-h2",
        "PAN-OS 11.1.6-h1",
        "PAN-OS 11.1.6",
        "PAN-OS 11.1.5-h1",
        "PAN-OS 11.1.5",
        "PAN-OS 11.1.4-h36",
        "PAN-OS 11.1.4-h35",
        "PAN-OS 11.1.4-h34",
        "PAN-OS 11.1.4-h33",
        "PAN-OS 11.1.4-h32",
        "PAN-OS 11.1.4-h27",
        "PAN-OS 11.1.4-h25",
        "PAN-OS 11.1.4-h18",
        "PAN-OS 11.1.4-h17",
        "PAN-OS 11.1.4-h15",
        "PAN-OS 11.1.4-h13",
        "PAN-OS 11.1.4-h12",
        "PAN-OS 11.1.4-h11",
        "PAN-OS 11.1.4-h10",
        "PAN-OS 11.1.4-h9",
        "PAN-OS 11.1.4-h8",
        "PAN-OS 11.1.4-h7",
        "PAN-OS 11.1.4-h6",
        "PAN-OS 11.1.4-h5",
        "PAN-OS 11.1.4-h4",
        "PAN-OS 11.1.4-h3",
        "PAN-OS 11.1.4-h2",
        "PAN-OS 11.1.4-h1",
        "PAN-OS 11.1.4",
        "PAN-OS 11.1.3-h13",
        "PAN-OS 11.1.3-h12",
        "PAN-OS 11.1.3-h11",
        "PAN-OS 11.1.3-h10",
        "PAN-OS 11.1.3-h9",
        "PAN-OS 11.1.3-h8",
        "PAN-OS 11.1.3-h7",
        "PAN-OS 11.1.3-h6",
        "PAN-OS 11.1.3-h5",
        "PAN-OS 11.1.3-h4",
        "PAN-OS 11.1.3-h3",
        "PAN-OS 11.1.3-h2",
        "PAN-OS 11.1.3-h1",
        "PAN-OS 11.1.3",
        "PAN-OS 11.1.2-h18",
        "PAN-OS 11.1.2-h17",
        "PAN-OS 11.1.2-h16",
        "PAN-OS 11.1.2-h15",
        "PAN-OS 11.1.2-h14",
        "PAN-OS 11.1.2-h13",
        "PAN-OS 11.1.2-h12",
        "PAN-OS 11.1.2-h11",
        "PAN-OS 11.1.2-h10",
        "PAN-OS 11.1.2-h9",
        "PAN-OS 11.1.2-h8",
        "PAN-OS 11.1.2-h7",
        "PAN-OS 11.1.2-h6",
        "PAN-OS 11.1.2-h5",
        "PAN-OS 11.1.2-h4",
        "PAN-OS 11.1.2-h3",
        "PAN-OS 11.1.2-h2",
        "PAN-OS 11.1.2-h1",
        "PAN-OS 11.1.2",
        "PAN-OS 11.1.1-h2",
        "PAN-OS 11.1.1-h1",
        "PAN-OS 11.1.1",
        "PAN-OS 11.1.0-h4",
        "PAN-OS 11.1.0-h3",
        "PAN-OS 11.1.0-h2",
        "PAN-OS 11.1.0-h1",
        "PAN-OS 11.1.0",
        "PAN-OS 10.2.18-h10",
        "PAN-OS 10.2.18-h9",
        "PAN-OS 10.2.18-h8",
        "PAN-OS 10.2.18-h7",
        "PAN-OS 10.2.18-h6",
        "PAN-OS 10.2.18-h5",
        "PAN-OS 10.2.18-h1",
        "PAN-OS 10.2.18",
        "PAN-OS 10.2.17",
        "PAN-OS 10.2.16-h10",
        "PAN-OS 10.2.16-h9",
        "PAN-OS 10.2.16-h8",
        "PAN-OS 10.2.16-h7",
        "PAN-OS 10.2.16-h6",
        "PAN-OS 10.2.16-h4",
        "PAN-OS 10.2.16-h1",
        "PAN-OS 10.2.16",
        "PAN-OS 10.2.15",
        "PAN-OS 10.2.14-h1",
        "PAN-OS 10.2.14",
        "PAN-OS 10.2.13-h24",
        "PAN-OS 10.2.13-h23",
        "PAN-OS 10.2.13-h22",
        "PAN-OS 10.2.13-h21",
        "PAN-OS 10.2.13-h18",
        "PAN-OS 10.2.13-h16",
        "PAN-OS 10.2.13-h15",
        "PAN-OS 10.2.13-h10",
        "PAN-OS 10.2.13-h7",
        "PAN-OS 10.2.13-h5",
        "PAN-OS 10.2.13-h4",
        "PAN-OS 10.2.13-h3",
        "PAN-OS 10.2.13-h2",
        "PAN-OS 10.2.13-h1",
        "PAN-OS 10.2.13",
        "PAN-OS 10.2.12-h6",
        "PAN-OS 10.2.12-h5",
        "PAN-OS 10.2.12-h4",
        "PAN-OS 10.2.12-h3",
        "PAN-OS 10.2.12-h2",
        "PAN-OS 10.2.12-h1",
        "PAN-OS 10.2.12",
        "PAN-OS 10.2.11-h13",
        "PAN-OS 10.2.11-h12",
        "PAN-OS 10.2.11-h11",
        "PAN-OS 10.2.11-h10",
        "PAN-OS 10.2.11-h9",
        "PAN-OS 10.2.11-h8",
        "PAN-OS 10.2.11-h7",
        "PAN-OS 10.2.11-h6",
        "PAN-OS 10.2.11-h5",
        "PAN-OS 10.2.11-h4",
        "PAN-OS 10.2.11-h3",
        "PAN-OS 10.2.11-h2",
        "PAN-OS 10.2.11-h1",
        "PAN-OS 10.2.11",
        "PAN-OS 10.2.10-h40",
        "PAN-OS 10.2.10-h39",
        "PAN-OS 10.2.10-h37",
        "PAN-OS 10.2.10-h36",
        "PAN-OS 10.2.10-h31",
        "PAN-OS 10.2.10-h30",
        "PAN-OS 10.2.10-h27",
        "PAN-OS 10.2.10-h26",
        "PAN-OS 10.2.10-h23",
        "PAN-OS 10.2.10-h21",
        "PAN-OS 10.2.10-h18",
        "PAN-OS 10.2.10-h17",
        "PAN-OS 10.2.10-h14",
        "PAN-OS 10.2.10-h13",
        "PAN-OS 10.2.10-h12",
        "PAN-OS 10.2.10-h11",
        "PAN-OS 10.2.10-h10",
        "PAN-OS 10.2.10-h9",
        "PAN-OS 10.2.10-h8",
        "PAN-OS 10.2.10-h7",
        "PAN-OS 10.2.10-h6",
        "PAN-OS 10.2.10-h5",
        "PAN-OS 10.2.10-h4",
        "PAN-OS 10.2.10-h3",
        "PAN-OS 10.2.10-h2",
        "PAN-OS 10.2.10-h1",
        "PAN-OS 10.2.10",
        "PAN-OS 10.2.9-h21",
        "PAN-OS 10.2.9-h20",
        "PAN-OS 10.2.9-h19",
        "PAN-OS 10.2.9-h18",
        "PAN-OS 10.2.9-h17",
        "PAN-OS 10.2.9-h16",
        "PAN-OS 10.2.9-h15",
        "PAN-OS 10.2.9-h14",
        "PAN-OS 10.2.9-h13",
        "PAN-OS 10.2.9-h12",
        "PAN-OS 10.2.9-h11",
        "PAN-OS 10.2.9-h10",
        "PAN-OS 10.2.9-h9",
        "PAN-OS 10.2.9-h8",
        "PAN-OS 10.2.9-h7",
        "PAN-OS 10.2.9-h6",
        "PAN-OS 10.2.9-h5",
        "PAN-OS 10.2.9-h4",
        "PAN-OS 10.2.9-h3",
        "PAN-OS 10.2.9-h2",
        "PAN-OS 10.2.9-h1",
        "PAN-OS 10.2.9",
        "PAN-OS 10.2.8-h21",
        "PAN-OS 10.2.8-h20",
        "PAN-OS 10.2.8-h19",
        "PAN-OS 10.2.8-h18",
        "PAN-OS 10.2.8-h17",
        "PAN-OS 10.2.8-h16",
        "PAN-OS 10.2.8-h15",
        "PAN-OS 10.2.8-h14",
        "PAN-OS 10.2.8-h13",
        "PAN-OS 10.2.8-h12",
        "PAN-OS 10.2.8-h11",
        "PAN-OS 10.2.8-h10",
        "PAN-OS 10.2.8-h9",
        "PAN-OS 10.2.8-h8",
        "PAN-OS 10.2.8-h7",
        "PAN-OS 10.2.8-h6",
        "PAN-OS 10.2.8-h5",
        "PAN-OS 10.2.8-h4",
        "PAN-OS 10.2.8-h3",
        "PAN-OS 10.2.8-h2",
        "PAN-OS 10.2.8-h1",
        "PAN-OS 10.2.8",
        "PAN-OS 10.2.7-h37",
        "PAN-OS 10.2.7-h36",
        "PAN-OS 10.2.7-h35",
        "PAN-OS 10.2.7-h34",
        "PAN-OS 10.2.7-h32",
        "PAN-OS 10.2.7-h24",
        "PAN-OS 10.2.7-h23",
        "PAN-OS 10.2.7-h22",
        "PAN-OS 10.2.7-h21",
        "PAN-OS 10.2.7-h20",
        "PAN-OS 10.2.7-h19",
        "PAN-OS 10.2.7-h18",
        "PAN-OS 10.2.7-h17",
        "PAN-OS 10.2.7-h16",
        "PAN-OS 10.2.7-h15",
        "PAN-OS 10.2.7-h14",
        "PAN-OS 10.2.7-h13",
        "PAN-OS 10.2.7-h12",
        "PAN-OS 10.2.7-h11",
        "PAN-OS 10.2.7-h10",
        "PAN-OS 10.2.7-h9",
        "PAN-OS 10.2.7-h8",
        "PAN-OS 10.2.7-h7",
        "PAN-OS 10.2.7-h6",
        "PAN-OS 10.2.7-h5",
        "PAN-OS 10.2.7-h4",
        "PAN-OS 10.2.7-h3",
        "PAN-OS 10.2.7-h2",
        "PAN-OS 10.2.7-h1",
        "PAN-OS 10.2.7",
        "PAN-OS 10.2.6-h6",
        "PAN-OS 10.2.6-h5",
        "PAN-OS 10.2.6-h4",
        "PAN-OS 10.2.6-h3",
        "PAN-OS 10.2.6-h2",
        "PAN-OS 10.2.6-h1",
        "PAN-OS 10.2.6",
        "PAN-OS 10.2.5-h9",
        "PAN-OS 10.2.5-h8",
        "PAN-OS 10.2.5-h7",
        "PAN-OS 10.2.5-h6",
        "PAN-OS 10.2.5-h5",
        "PAN-OS 10.2.5-h4",
        "PAN-OS 10.2.5-h3",
        "PAN-OS 10.2.5-h2",
        "PAN-OS 10.2.5-h1",
        "PAN-OS 10.2.5",
        "PAN-OS 10.2.4-h32",
        "PAN-OS 10.2.4-h31",
        "PAN-OS 10.2.4-h30",
        "PAN-OS 10.2.4-h29",
        "PAN-OS 10.2.4-h28",
        "PAN-OS 10.2.4-h27",
        "PAN-OS 10.2.4-h26",
        "PAN-OS 10.2.4-h25",
        "PAN-OS 10.2.4-h24",
        "PAN-OS 10.2.4-h23",
        "PAN-OS 10.2.4-h22",
        "PAN-OS 10.2.4-h21",
        "PAN-OS 10.2.4-h20",
        "PAN-OS 10.2.4-h19",
        "PAN-OS 10.2.4-h18",
        "PAN-OS 10.2.4-h17",
        "PAN-OS 10.2.4-h16",
        "PAN-OS 10.2.4-h15",
        "PAN-OS 10.2.4-h14",
        "PAN-OS 10.2.4-h13",
        "PAN-OS 10.2.4-h12",
        "PAN-OS 10.2.4-h11",
        "PAN-OS 10.2.4-h10",
        "PAN-OS 10.2.4-h9",
        "PAN-OS 10.2.4-h8",
        "PAN-OS 10.2.4-h7",
        "PAN-OS 10.2.4-h6",
        "PAN-OS 10.2.4-h5",
        "PAN-OS 10.2.4-h4",
        "PAN-OS 10.2.4-h3",
        "PAN-OS 10.2.4-h2",
        "PAN-OS 10.2.4-h1",
        "PAN-OS 10.2.4",
        "PAN-OS 10.2.3-h14",
        "PAN-OS 10.2.3-h13",
        "PAN-OS 10.2.3-h12",
        "PAN-OS 10.2.3-h11",
        "PAN-OS 10.2.3-h10",
        "PAN-OS 10.2.3-h9",
        "PAN-OS 10.2.3-h8",
        "PAN-OS 10.2.3-h7",
        "PAN-OS 10.2.3-h6",
        "PAN-OS 10.2.3-h5",
        "PAN-OS 10.2.3-h4",
        "PAN-OS 10.2.3-h3",
        "PAN-OS 10.2.3-h2",
        "PAN-OS 10.2.3-h1",
        "PAN-OS 10.2.3",
        "PAN-OS 10.2.2-h6",
        "PAN-OS 10.2.2-h5",
        "PAN-OS 10.2.2-h4",
        "PAN-OS 10.2.2-h3",
        "PAN-OS 10.2.2-h2",
        "PAN-OS 10.2.2-h1",
        "PAN-OS 10.2.2",
        "PAN-OS 10.2.1-h3",
        "PAN-OS 10.2.1-h2",
        "PAN-OS 10.2.1-h1",
        "PAN-OS 10.2.1",
        "PAN-OS 10.2.0-h4",
        "PAN-OS 10.2.0-h3",
        "PAN-OS 10.2.0-h2",
        "PAN-OS 10.2.0-h1",
        "PAN-OS 10.2.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0319",
    "datePublished": "2026-10-14T20:15:32.174Z",
    "dateReserved": "2025-11-03T20:45:17.582Z",
    "dateUpdated": "2026-10-15T18:53:43.155Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-0318 (GCVE-0-2026-0318)

    Vulnerability from nvd – Published: 2026-10-14 20:19 – Updated: 2026-10-15 18:48
    VLAI
    Title
    PAN-OS: Denial of Service (DoS) on Panorama
    Summary
    A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software on Panorama enables an attacker to cause a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the Panorama entering maintenance mode. Cloud NGFW, Prisma® Access, and standalone PAN-OS firewalls are not affected by this vulnerability.
    Severity
    4.6 (Medium)
    CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-15 18:48 UTC
    CWE
    • CWE-754 - Improper Check for Unusual or Exceptional Conditions
    Assigner
    palo_alto CNA under the mitre root
    CNA scorecard A 95/100 over 96 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Palo Alto Networks Cloud NGFW Unaffected: All (custom)
    		Create a notification for this product.
    Palo Alto Networks PAN-OS Affected: 12.2.0 , < 12.2.4 (custom)
    Affected: 12.1.0 , < 12.1.10-h2 (custom)
    Affected: 11.2.0 , < 11.2.16 (custom)
    Affected: 11.1.0 , < 11.1.16-h3 (custom)
        cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h12:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h11:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h10:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h9:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h8:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h7:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h6:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h5:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h33:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h32:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h30:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h28:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h27:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h26:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h25:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h38:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h36:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h35:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h34:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h33:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h32:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h36:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h35:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h34:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h33:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:Panorama:*
    		Create a notification for this product.
    Palo Alto Networks Prisma Access Unaffected: All , < 12.1.7-h8 (custom)
    		Create a notification for this product.
    Date Public
    2026-10-14 16:00
    Credits
    Ben Nott (internal reporter)
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0318",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T18:48:12.298954Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T18:48:22.858Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Cloud NGFW",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h12:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h11:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h10:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h9:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h8:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h7:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h6:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h5:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h33:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h32:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h30:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h28:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h27:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h26:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h25:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h38:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h36:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h35:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h34:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h33:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h32:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h36:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h35:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h34:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h33:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:Panorama:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Panorama"
          ],
          "product": "PAN-OS",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.2.4",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.2.4",
              "status": "affected",
              "version": "12.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "12.1.4-h12",
                  "status": "unaffected"
                },
                {
                  "at": "12.1.7-h8",
                  "status": "unaffected"
                },
                {
                  "at": "12.1.10-h2",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.1.10-h2",
              "status": "affected",
              "version": "12.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.2.4-h22",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.7-h21",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.10-h15",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.13-h3",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.2.16",
              "status": "affected",
              "version": "11.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.1.4-h37",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.6-h39",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.7-h11",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.10-h35",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.13-h15",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.16-h3",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.1.16-h3",
              "status": "affected",
              "version": "11.1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Prisma Access",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.1.7-h8",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.1.7-h8",
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cspan\u003eThis issue applies only to Panorama in \u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/panorama/getting-started/set-up-panorama/set-up-the-panorama-virtual-appliance/set-up-the-panorama-virtual-appliance-in-panorama-mode\"\u003e\u003cspan\u003epanorama system\u003c/span\u003e\u003c/a\u003e\u003cspan\u003e-mode (or \u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/panorama/getting-started/set-up-panorama/set-up-the-panorama-virtual-appliance/set-up-the-panorama-virtual-appliance-in-management-only-mode\"\u003e\u003cspan\u003emanagement-only \u003c/span\u003e\u003c/a\u003e\u003cspan\u003ewith Log Collector) with a \u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/panorama/getting-started/set-up-panorama/set-up-the-panorama-virtual-appliance/set-up-the-panorama-virtual-appliance-as-a-log-collector\"\u003e\u003cspan\u003eCollector Group configured\u003c/span\u003e\u003c/a\u003e\u003cspan\u003e. Standalone PAN-OS firewalls are not affected.\u003c/span\u003e\u003c/p\u003e"
            }
          ],
          "value": "This issue applies only to Panorama in  panorama system https://docs.paloaltonetworks.com/panorama/getting-started/set-up-panorama/set-up-the-panorama-virtual-appliance/set-up-the-panorama-virtual-appliance-in-panorama-mode -mode (or  management-only  https://docs.paloaltonetworks.com/panorama/getting-started/set-up-panorama/set-up-the-panorama-virtual-appliance/set-up-the-panorama-virtual-appliance-in-management-only-mode with Log Collector) with a  Collector Group configured https://docs.paloaltonetworks.com/panorama/getting-started/set-up-panorama/set-up-the-panorama-virtual-appliance/set-up-the-panorama-virtual-appliance-as-a-log-collector . Standalone PAN-OS firewalls are not affected."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*",
                  "versionEndExcluding": "12.2.4",
                  "versionStartIncluding": "12.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*",
                  "versionEndExcluding": "12.1.4-h12",
                  "versionStartIncluding": "12.1.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*",
                  "versionEndExcluding": "12.1.7-h8",
                  "versionStartIncluding": "12.1.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*",
                  "versionEndExcluding": "12.1.10-h2",
                  "versionStartIncluding": "12.1.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*",
                  "versionEndExcluding": "11.2.4-h22",
                  "versionStartIncluding": "11.2.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*",
                  "versionEndExcluding": "11.2.7-h21",
                  "versionStartIncluding": "11.2.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*",
                  "versionEndExcluding": "11.2.10-h15",
                  "versionStartIncluding": "11.2.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*",
                  "versionEndExcluding": "11.2.13-h3",
                  "versionStartIncluding": "11.2.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*",
                  "versionEndExcluding": "11.2.15",
                  "versionStartIncluding": "11.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*",
                  "versionEndExcluding": "11.1.4-h37",
                  "versionStartIncluding": "11.1.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*",
                  "versionEndExcluding": "11.1.6-h39",
                  "versionStartIncluding": "11.1.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*",
                  "versionEndExcluding": "11.1.7-h11",
                  "versionStartIncluding": "11.1.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*",
                  "versionEndExcluding": "11.1.10-h35",
                  "versionStartIncluding": "11.1.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*",
                  "versionEndExcluding": "11.1.13-h15",
                  "versionStartIncluding": "11.1.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*",
                  "versionEndExcluding": "11.1.16-h3",
                  "versionStartIncluding": "11.1.16",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Ben Nott (internal reporter)"
        }
      ],
      "datePublic": "2026-10-14T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS\u00ae software on Panorama enables an attacker to cause a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the Panorama entering maintenance mode.\u003cbr\u003e\u003cbr\u003eCloud NGFW, Prisma\u00ae Access, and standalone PAN-OS firewalls are not affected by this vulnerability."
            }
          ],
          "value": "A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS\u00ae software on Panorama enables an attacker to cause a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the Panorama entering maintenance mode.\n\nCloud NGFW, Prisma\u00ae Access, and standalone PAN-OS firewalls are not affected by this vulnerability."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-153",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-153 Input Data Manipulation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-754",
              "description": "CWE-754 Improper Check for Unusual or Exceptional Conditions",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T20:19:28.773Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "name": "PAN-OS Security Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0318"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003c/th\u003e\u003cth\u003eMinor Version\u003c/th\u003e\u003cth\u003eSuggested Solution\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eCloud NGFW\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePAN-OS 12.2\u003c/td\u003e\u003ctd\u003e12.2.0 through 12.2.3\u003c/td\u003e\u003ctd\u003eUpgrade to 12.2.4 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePAN-OS 12.1\u003c/td\u003e\u003ctd\u003e12.1.8 through 12.1.10-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 12.1.10-h2 or later.\u0026nbsp;\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003e12.1.5 through 12.1.7-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 12.1.7-h8 or 12.1.10-h2 or later.\u0026nbsp;\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003e12.1.2 through 12.1.4-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 12.1.4-h12 or 12.1.10-h2 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePAN-OS 11.2\u003c/td\u003e\u003ctd\u003e11.2.14 through 11.2.14-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 11.2.15 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003e11.2.11 through 11.2.13-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 11.2.13-h3 or 11.2.15 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003e11.2.8 through 11.2.10-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 11.2.10-h15 or 11.2.15 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003e11.2.5 through 11.2.7-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 11.2.7-h21 or 11.2.15 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003e11.2.0 through 11.2.4-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 11.2.4-h22 or 11.2.15 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePAN-OS 11.1\u003c/td\u003e\u003ctd\u003e11.1.14 through 11.1.16-h*\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 11.1.16-h3 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003e11.1.11 through 11.1.13-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 11.1.13-h15 or 11.1.16-h3 or later.\u0026nbsp;\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003e11.1.8 through 11.1.10-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 11.1.10-h35 or 11.1.16-h3 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003e11.1.7 through 11.1.7-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 11.1.7-h11 or 11.1.16-h3 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003e11.1.5 through 11.1.6-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 11.1.6-h39 or 11.1.16-h3 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003e11.1.0 through 11.1.4-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 11.1.4-h37 or 11.1.16-h3 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eAll older\u003cbr\u003eunsupported\u003cbr\u003ePAN-OS versions\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to a supported fixed version.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePrisma Access\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VersionMinor VersionSuggested SolutionCloud NGFWNo action needed.PAN-OS 12.212.2.0 through 12.2.3Upgrade to 12.2.4 or later.PAN-OS 12.112.1.8 through 12.1.10-h*Upgrade to 12.1.10-h2 or later.\u00a012.1.5 through 12.1.7-h*Upgrade to 12.1.7-h8 or 12.1.10-h2 or later.\u00a012.1.2 through 12.1.4-h*Upgrade to 12.1.4-h12 or 12.1.10-h2 or later.PAN-OS 11.211.2.14 through 11.2.14-h*Upgrade to 11.2.15 or later.11.2.11 through 11.2.13-h*Upgrade to 11.2.13-h3 or 11.2.15 or later.11.2.8 through 11.2.10-h*Upgrade to 11.2.10-h15 or 11.2.15 or later.11.2.5 through 11.2.7-h*Upgrade to 11.2.7-h21 or 11.2.15 or later.11.2.0 through 11.2.4-h*Upgrade to 11.2.4-h22 or 11.2.15 or later.PAN-OS 11.111.1.14 through 11.1.16-h*\nUpgrade to 11.1.16-h3 or later.\u00a011.1.11 through 11.1.13-h*Upgrade to 11.1.13-h15 or 11.1.16-h3 or later.\u00a011.1.8 through 11.1.10-h*Upgrade to 11.1.10-h35 or 11.1.16-h3 or later.11.1.7 through 11.1.7-h*Upgrade to 11.1.7-h11 or 11.1.16-h3 or later.11.1.5 through 11.1.6-h*Upgrade to 11.1.6-h39 or 11.1.16-h3 or later.11.1.0 through 11.1.4-h*Upgrade to 11.1.4-h37 or 11.1.16-h3 or later.All older\nunsupported\nPAN-OS versionsUpgrade to a supported fixed version.Prisma Access\u00a0No action needed."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-14T16:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "PAN-OS: Denial of Service (DoS) on Panorama",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The risk posed by this vulnerability can be reduced significantly by limiting access to Panorama to only known good IP addresses."
            }
          ],
          "value": "The risk posed by this vulnerability can be reduced significantly by limiting access to Panorama to only known good IP addresses."
        }
      ],
      "x_affectedList": [
        "PAN-OS 12.2.3",
        "PAN-OS 12.2.2",
        "PAN-OS 12.1.10",
        "PAN-OS 12.1.9",
        "PAN-OS 12.1.8",
        "PAN-OS 12.1.7-h6",
        "PAN-OS 12.1.7-h5",
        "PAN-OS 12.1.7-h3",
        "PAN-OS 12.1.7-h2",
        "PAN-OS 12.1.7-h1",
        "PAN-OS 12.1.7",
        "PAN-OS 12.1.6",
        "PAN-OS 12.1.5",
        "PAN-OS 12.1.4-h11",
        "PAN-OS 12.1.4-h10",
        "PAN-OS 12.1.4-h9",
        "PAN-OS 12.1.4-h8",
        "PAN-OS 12.1.4-h7",
        "PAN-OS 12.1.4-h6",
        "PAN-OS 12.1.4-h5",
        "PAN-OS 12.1.4-h3",
        "PAN-OS 12.1.4-h2",
        "PAN-OS 12.1.4",
        "PAN-OS 12.1.3-h3",
        "PAN-OS 12.1.3-h1",
        "PAN-OS 12.1.3",
        "PAN-OS 12.1.2",
        "PAN-OS 11.2.13-h2",
        "PAN-OS 11.2.13-h1",
        "PAN-OS 11.2.13",
        "PAN-OS 11.2.12",
        "PAN-OS 11.2.11",
        "PAN-OS 11.2.10-h14",
        "PAN-OS 11.2.10-h13",
        "PAN-OS 11.2.10-h12",
        "PAN-OS 11.2.10-h10",
        "PAN-OS 11.2.10-h9",
        "PAN-OS 11.2.10-h8",
        "PAN-OS 11.2.10-h7",
        "PAN-OS 11.2.10-h6",
        "PAN-OS 11.2.10-h5",
        "PAN-OS 11.2.10-h4",
        "PAN-OS 11.2.10-h3",
        "PAN-OS 11.2.10-h2",
        "PAN-OS 11.2.10-h1",
        "PAN-OS 11.2.10",
        "PAN-OS 11.2.9",
        "PAN-OS 11.2.8",
        "PAN-OS 11.2.7-h20",
        "PAN-OS 11.2.7-h19",
        "PAN-OS 11.2.7-h18",
        "PAN-OS 11.2.7-h17",
        "PAN-OS 11.2.7-h16",
        "PAN-OS 11.2.7-h15",
        "PAN-OS 11.2.7-h14",
        "PAN-OS 11.2.7-h13",
        "PAN-OS 11.2.7-h12",
        "PAN-OS 11.2.7-h11",
        "PAN-OS 11.2.7-h10",
        "PAN-OS 11.2.7-h8",
        "PAN-OS 11.2.7-h7",
        "PAN-OS 11.2.7-h4",
        "PAN-OS 11.2.7-h3",
        "PAN-OS 11.2.7-h2",
        "PAN-OS 11.2.7-h1",
        "PAN-OS 11.2.7",
        "PAN-OS 11.2.6",
        "PAN-OS 11.2.5",
        "PAN-OS 11.2.4-h21",
        "PAN-OS 11.2.4-h20",
        "PAN-OS 11.2.4-h18",
        "PAN-OS 11.2.4-h17",
        "PAN-OS 11.2.4-h15",
        "PAN-OS 11.2.4-h14",
        "PAN-OS 11.2.4-h12",
        "PAN-OS 11.2.4-h11",
        "PAN-OS 11.2.4-h10",
        "PAN-OS 11.2.4-h9",
        "PAN-OS 11.2.4-h8",
        "PAN-OS 11.2.4-h7",
        "PAN-OS 11.2.4-h6",
        "PAN-OS 11.2.4-h5",
        "PAN-OS 11.2.4-h4",
        "PAN-OS 11.2.4-h3",
        "PAN-OS 11.2.4-h2",
        "PAN-OS 11.2.4-h1",
        "PAN-OS 11.2.4",
        "PAN-OS 11.2.3-h5",
        "PAN-OS 11.2.3-h4",
        "PAN-OS 11.2.3-h3",
        "PAN-OS 11.2.3-h2",
        "PAN-OS 11.2.3-h1",
        "PAN-OS 11.2.3",
        "PAN-OS 11.2.2-h2",
        "PAN-OS 11.2.2-h1",
        "PAN-OS 11.2.1-h1",
        "PAN-OS 11.2.1",
        "PAN-OS 11.2.0-h1",
        "PAN-OS 11.2.0",
        "PAN-OS 11.1.16-h2",
        "PAN-OS 11.1.16-h1",
        "PAN-OS 11.1.16",
        "PAN-OS 11.1.15",
        "PAN-OS 11.1.14",
        "PAN-OS 11.1.13-h12",
        "PAN-OS 11.1.13-h11",
        "PAN-OS 11.1.13-h10",
        "PAN-OS 11.1.13-h9",
        "PAN-OS 11.1.13-h8",
        "PAN-OS 11.1.13-h7",
        "PAN-OS 11.1.13-h6",
        "PAN-OS 11.1.13-h5",
        "PAN-OS 11.1.13-h3",
        "PAN-OS 11.1.13-h2",
        "PAN-OS 11.1.13-h1",
        "PAN-OS 11.1.13",
        "PAN-OS 11.1.12",
        "PAN-OS 11.1.11",
        "PAN-OS 11.1.10-h33",
        "PAN-OS 11.1.10-h32",
        "PAN-OS 11.1.10-h30",
        "PAN-OS 11.1.10-h28",
        "PAN-OS 11.1.10-h27",
        "PAN-OS 11.1.10-h26",
        "PAN-OS 11.1.10-h25",
        "PAN-OS 11.1.10-h21",
        "PAN-OS 11.1.10-h12",
        "PAN-OS 11.1.10-h10",
        "PAN-OS 11.1.10-h9",
        "PAN-OS 11.1.10-h7",
        "PAN-OS 11.1.10-h5",
        "PAN-OS 11.1.10-h4",
        "PAN-OS 11.1.10-h1",
        "PAN-OS 11.1.10",
        "PAN-OS 11.1.9",
        "PAN-OS 11.1.8",
        "PAN-OS 11.1.6-h38",
        "PAN-OS 11.1.6-h36",
        "PAN-OS 11.1.6-h35",
        "PAN-OS 11.1.6-h34",
        "PAN-OS 11.1.6-h33",
        "PAN-OS 11.1.6-h32",
        "PAN-OS 11.1.6-h29",
        "PAN-OS 11.1.6-h25",
        "PAN-OS 11.1.6-h23",
        "PAN-OS 11.1.6-h22",
        "PAN-OS 11.1.6-h21",
        "PAN-OS 11.1.6-h20",
        "PAN-OS 11.1.6-h19",
        "PAN-OS 11.1.6-h18",
        "PAN-OS 11.1.6-h17",
        "PAN-OS 11.1.6-h14",
        "PAN-OS 11.1.6-h10",
        "PAN-OS 11.1.6-h7",
        "PAN-OS 11.1.6-h6",
        "PAN-OS 11.1.6-h4",
        "PAN-OS 11.1.6-h3",
        "PAN-OS 11.1.6-h2",
        "PAN-OS 11.1.6-h1",
        "PAN-OS 11.1.6",
        "PAN-OS 11.1.5-h1",
        "PAN-OS 11.1.5",
        "PAN-OS 11.1.4-h36",
        "PAN-OS 11.1.4-h35",
        "PAN-OS 11.1.4-h34",
        "PAN-OS 11.1.4-h33",
        "PAN-OS 11.1.4-h32",
        "PAN-OS 11.1.4-h27",
        "PAN-OS 11.1.4-h25",
        "PAN-OS 11.1.4-h18",
        "PAN-OS 11.1.4-h17",
        "PAN-OS 11.1.4-h15",
        "PAN-OS 11.1.4-h13",
        "PAN-OS 11.1.4-h12",
        "PAN-OS 11.1.4-h11",
        "PAN-OS 11.1.4-h10",
        "PAN-OS 11.1.4-h9",
        "PAN-OS 11.1.4-h8",
        "PAN-OS 11.1.4-h7",
        "PAN-OS 11.1.4-h6",
        "PAN-OS 11.1.4-h5",
        "PAN-OS 11.1.4-h4",
        "PAN-OS 11.1.4-h3",
        "PAN-OS 11.1.4-h2",
        "PAN-OS 11.1.4-h1",
        "PAN-OS 11.1.4",
        "PAN-OS 11.1.3-h13",
        "PAN-OS 11.1.3-h12",
        "PAN-OS 11.1.3-h11",
        "PAN-OS 11.1.3-h10",
        "PAN-OS 11.1.3-h9",
        "PAN-OS 11.1.3-h8",
        "PAN-OS 11.1.3-h7",
        "PAN-OS 11.1.3-h6",
        "PAN-OS 11.1.3-h5",
        "PAN-OS 11.1.3-h4",
        "PAN-OS 11.1.3-h3",
        "PAN-OS 11.1.3-h2",
        "PAN-OS 11.1.3-h1",
        "PAN-OS 11.1.3",
        "PAN-OS 11.1.2-h18",
        "PAN-OS 11.1.2-h17",
        "PAN-OS 11.1.2-h16",
        "PAN-OS 11.1.2-h15",
        "PAN-OS 11.1.2-h14",
        "PAN-OS 11.1.2-h13",
        "PAN-OS 11.1.2-h12",
        "PAN-OS 11.1.2-h11",
        "PAN-OS 11.1.2-h10",
        "PAN-OS 11.1.2-h9",
        "PAN-OS 11.1.2-h8",
        "PAN-OS 11.1.2-h7",
        "PAN-OS 11.1.2-h6",
        "PAN-OS 11.1.2-h5",
        "PAN-OS 11.1.2-h4",
        "PAN-OS 11.1.2-h3",
        "PAN-OS 11.1.2-h2",
        "PAN-OS 11.1.2-h1",
        "PAN-OS 11.1.2",
        "PAN-OS 11.1.1-h2",
        "PAN-OS 11.1.1-h1",
        "PAN-OS 11.1.1",
        "PAN-OS 11.1.0-h4",
        "PAN-OS 11.1.0-h3",
        "PAN-OS 11.1.0-h2",
        "PAN-OS 11.1.0-h1",
        "PAN-OS 11.1.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0318",
    "datePublished": "2026-10-14T20:19:28.773Z",
    "dateReserved": "2025-11-03T20:45:16.597Z",
    "dateUpdated": "2026-10-15T18:48:22.858Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-0317 (GCVE-0-2026-0317)

    Vulnerability from nvd – Published: 2026-10-14 20:21 – Updated: 2026-10-15 18:47
    VLAI
    Title
    PAN-OS: Denial of Service Vulnerability
    Summary
    A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only administrator role to cause a denial of service (DoS) condition by sending a specially crafted API request. The security risk posed by this issue is significantly minimized by restricting access to the management web interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . Cloud NGFW, Panorama, and Prisma® Access are not affected by this vulnerability.
    Severity
    1.2 (Low)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/AU:N/R:A/V:D/RE:L/U:Amber
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-15 18:45 UTC
    CWE
    • CWE-754 - Improper Check for Unusual or Exceptional Conditions
    Assigner
    palo_alto CNA under the mitre root
    CNA scorecard A 95/100 over 96 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Palo Alto Networks Cloud NGFW Unaffected: All (custom)
    		Create a notification for this product.
    Palo Alto Networks PAN-OS Affected: 12.2.0 , < 12.2.4 (custom)
    Affected: 12.1.0 , < 12.1.10-h2 (custom)
    Affected: 11.2.0 , < 11.2.16 (custom)
    Affected: 11.1.0 , < 11.1.16-h3 (custom)
        cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*
    		Create a notification for this product.
    Palo Alto Networks Prisma Access Unaffected: All , < 12.1.7-h8 (custom)
    		Create a notification for this product.
    Date Public
    2026-10-14 16:00
    Credits
    Michael Messner and Benedikt Kuehne
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0317",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T18:45:51.153391Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T18:47:53.957Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "Cloud NGFW",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "PAN-OS",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.2.4",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.2.4",
              "status": "affected",
              "version": "12.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "12.1.10-h2",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.1.10-h2",
              "status": "affected",
              "version": "12.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.2.16",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.2.16",
              "status": "affected",
              "version": "11.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.1.16-h3",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.1.16-h3",
              "status": "affected",
              "version": "11.1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Prisma Access",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.1.7-h8",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.1.7-h8",
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003eNo special configuration is required to be affected by this issue.\u003c/span\u003e"
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.2.4",
                  "versionStartIncluding": "12.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.1.10-h2",
                  "versionStartIncluding": "12.1.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.2.16",
                  "versionStartIncluding": "11.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.1.16-h3",
                  "versionStartIncluding": "11.1.16",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Michael Messner and Benedikt Kuehne"
        }
      ],
      "datePublic": "2026-10-14T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only administrator role\u0026nbsp;to cause a denial of service (DoS) condition by sending a specially crafted API request.\u003cbr\u003e\u003cbr\u003e\u003cspan\u003eThe security risk posed by this issue is significantly minimized by restricting access to the management web interface to only trusted internal IP addresses according to our recommended\u003c/span\u003e \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431\"\u003e\u003cspan\u003ebest practice deployment guidelines\u003c/span\u003e\u003c/a\u003e\u003cspan\u003e.\u003c/span\u003e\u003cbr\u003e\u003cbr\u003e\u003cspan\u003eCloud NGFW, Panorama, and Prisma\u00ae Access are not affected by this vulnerability.\u003c/span\u003e"
            }
          ],
          "value": "A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only administrator role\u00a0to cause a denial of service (DoS) condition by sending a specially crafted API request.\n\nThe security risk posed by this issue is significantly minimized by restricting access to the management web interface to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .\n\nCloud NGFW, Panorama, and Prisma\u00ae Access are not affected by this vulnerability."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-130",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-130 Excessive Allocation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "AUTOMATIC",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 1.2,
            "baseSeverity": "LOW",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/AU:N/R:A/V:D/RE:L/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "LOW"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-754",
              "description": "CWE-754 Improper Check for Unusual or Exceptional Conditions",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T20:21:21.338Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "name": "PAN-OS Security Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0317"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003c/th\u003e\u003cth\u003eMinor Version Range\u003c/th\u003e\u003cth\u003eSuggested Solution\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eCloud NGFW\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action required.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u0026nbsp;PAN-OS 12.1\u003c/td\u003e\u003ctd\u003e12.2.0 through 12.2.3-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 12.2.4 or later.\u0026nbsp;\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePAN-OS 12.1\u003c/td\u003e\u003ctd\u003e12.1.2 through 12.1.10-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 12.1.10-h2 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePAN-OS 11.2\u003c/td\u003e\u003ctd\u003e11.2.0 through 11.2.15-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 11.2.16 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePAN-OS 11.1\u003c/td\u003e\u003ctd\u003e11.1.0 through 11.1.16-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 11.1.16-h3 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eAll other older\u003cbr\u003eunsupported\u003cbr\u003ePAN-OS versions\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to a supported fixed version.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u0026nbsp;Prisma Access\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VersionMinor Version RangeSuggested SolutionCloud NGFW\nNo action required.\u00a0PAN-OS 12.112.2.0 through 12.2.3-h*Upgrade to 12.2.4 or later.\u00a0PAN-OS 12.112.1.2 through 12.1.10-h*Upgrade to 12.1.10-h2 or later.PAN-OS 11.211.2.0 through 11.2.15-h*Upgrade to 11.2.16 or later.PAN-OS 11.111.1.0 through 11.1.16-h*Upgrade to 11.1.16-h3 or later.All other older\nunsupported\nPAN-OS versions\nUpgrade to a supported fixed version.\u00a0Prisma Access\nNo action needed."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:00:00.000Z",
          "value": "Initial publication"
        }
      ],
      "title": "PAN-OS: Denial of Service Vulnerability",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003eNo known workarounds exist for this issue.\u003c/span\u003e"
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_affectedList": [
        "PAN-OS 12.2.3",
        "PAN-OS 12.2.2",
        "PAN-OS 12.1.10",
        "PAN-OS 12.1.9",
        "PAN-OS 12.1.8",
        "PAN-OS 12.1.7-h6",
        "PAN-OS 12.1.7-h5",
        "PAN-OS 12.1.7-h3",
        "PAN-OS 12.1.7-h2",
        "PAN-OS 12.1.7-h1",
        "PAN-OS 12.1.7",
        "PAN-OS 12.1.6",
        "PAN-OS 12.1.5",
        "PAN-OS 12.1.4-h11",
        "PAN-OS 12.1.4-h10",
        "PAN-OS 12.1.4-h9",
        "PAN-OS 12.1.4-h8",
        "PAN-OS 12.1.4-h7",
        "PAN-OS 12.1.4-h6",
        "PAN-OS 12.1.4-h5",
        "PAN-OS 12.1.4-h3",
        "PAN-OS 12.1.4-h2",
        "PAN-OS 12.1.4",
        "PAN-OS 12.1.3-h3",
        "PAN-OS 12.1.3-h1",
        "PAN-OS 12.1.3",
        "PAN-OS 12.1.2",
        "PAN-OS 11.2.15",
        "PAN-OS 11.2.13-h2",
        "PAN-OS 11.2.13-h1",
        "PAN-OS 11.2.13",
        "PAN-OS 11.2.12",
        "PAN-OS 11.2.11",
        "PAN-OS 11.2.10-h14",
        "PAN-OS 11.2.10-h13",
        "PAN-OS 11.2.10-h12",
        "PAN-OS 11.2.10-h10",
        "PAN-OS 11.2.10-h9",
        "PAN-OS 11.2.10-h8",
        "PAN-OS 11.2.10-h7",
        "PAN-OS 11.2.10-h6",
        "PAN-OS 11.2.10-h5",
        "PAN-OS 11.2.10-h4",
        "PAN-OS 11.2.10-h3",
        "PAN-OS 11.2.10-h2",
        "PAN-OS 11.2.10-h1",
        "PAN-OS 11.2.10",
        "PAN-OS 11.2.9",
        "PAN-OS 11.2.8",
        "PAN-OS 11.2.7-h20",
        "PAN-OS 11.2.7-h19",
        "PAN-OS 11.2.7-h18",
        "PAN-OS 11.2.7-h17",
        "PAN-OS 11.2.7-h16",
        "PAN-OS 11.2.7-h15",
        "PAN-OS 11.2.7-h14",
        "PAN-OS 11.2.7-h13",
        "PAN-OS 11.2.7-h12",
        "PAN-OS 11.2.7-h11",
        "PAN-OS 11.2.7-h10",
        "PAN-OS 11.2.7-h8",
        "PAN-OS 11.2.7-h7",
        "PAN-OS 11.2.7-h4",
        "PAN-OS 11.2.7-h3",
        "PAN-OS 11.2.7-h2",
        "PAN-OS 11.2.7-h1",
        "PAN-OS 11.2.7",
        "PAN-OS 11.2.6",
        "PAN-OS 11.2.5",
        "PAN-OS 11.2.4-h21",
        "PAN-OS 11.2.4-h20",
        "PAN-OS 11.2.4-h18",
        "PAN-OS 11.2.4-h17",
        "PAN-OS 11.2.4-h15",
        "PAN-OS 11.2.4-h14",
        "PAN-OS 11.2.4-h12",
        "PAN-OS 11.2.4-h11",
        "PAN-OS 11.2.4-h10",
        "PAN-OS 11.2.4-h9",
        "PAN-OS 11.2.4-h8",
        "PAN-OS 11.2.4-h7",
        "PAN-OS 11.2.4-h6",
        "PAN-OS 11.2.4-h5",
        "PAN-OS 11.2.4-h4",
        "PAN-OS 11.2.4-h3",
        "PAN-OS 11.2.4-h2",
        "PAN-OS 11.2.4-h1",
        "PAN-OS 11.2.4",
        "PAN-OS 11.2.3-h5",
        "PAN-OS 11.2.3-h4",
        "PAN-OS 11.2.3-h3",
        "PAN-OS 11.2.3-h2",
        "PAN-OS 11.2.3-h1",
        "PAN-OS 11.2.3",
        "PAN-OS 11.2.2-h2",
        "PAN-OS 11.2.2-h1",
        "PAN-OS 11.2.1-h1",
        "PAN-OS 11.2.1",
        "PAN-OS 11.2.0-h1",
        "PAN-OS 11.2.0",
        "PAN-OS 11.1.16-h2",
        "PAN-OS 11.1.16-h1",
        "PAN-OS 11.1.16",
        "PAN-OS 11.1.15",
        "PAN-OS 11.1.14",
        "PAN-OS 11.1.13-h12",
        "PAN-OS 11.1.13-h11",
        "PAN-OS 11.1.13-h10",
        "PAN-OS 11.1.13-h9",
        "PAN-OS 11.1.13-h8",
        "PAN-OS 11.1.13-h7",
        "PAN-OS 11.1.13-h6",
        "PAN-OS 11.1.13-h5",
        "PAN-OS 11.1.13-h3",
        "PAN-OS 11.1.13-h2",
        "PAN-OS 11.1.13-h1",
        "PAN-OS 11.1.13",
        "PAN-OS 11.1.12",
        "PAN-OS 11.1.11",
        "PAN-OS 11.1.10-h33",
        "PAN-OS 11.1.10-h32",
        "PAN-OS 11.1.10-h30",
        "PAN-OS 11.1.10-h28",
        "PAN-OS 11.1.10-h27",
        "PAN-OS 11.1.10-h26",
        "PAN-OS 11.1.10-h25",
        "PAN-OS 11.1.10-h21",
        "PAN-OS 11.1.10-h12",
        "PAN-OS 11.1.10-h10",
        "PAN-OS 11.1.10-h9",
        "PAN-OS 11.1.10-h7",
        "PAN-OS 11.1.10-h5",
        "PAN-OS 11.1.10-h4",
        "PAN-OS 11.1.10-h1",
        "PAN-OS 11.1.10",
        "PAN-OS 11.1.9",
        "PAN-OS 11.1.8",
        "PAN-OS 11.1.6-h38",
        "PAN-OS 11.1.6-h36",
        "PAN-OS 11.1.6-h35",
        "PAN-OS 11.1.6-h34",
        "PAN-OS 11.1.6-h33",
        "PAN-OS 11.1.6-h32",
        "PAN-OS 11.1.6-h29",
        "PAN-OS 11.1.6-h25",
        "PAN-OS 11.1.6-h23",
        "PAN-OS 11.1.6-h22",
        "PAN-OS 11.1.6-h21",
        "PAN-OS 11.1.6-h20",
        "PAN-OS 11.1.6-h19",
        "PAN-OS 11.1.6-h18",
        "PAN-OS 11.1.6-h17",
        "PAN-OS 11.1.6-h14",
        "PAN-OS 11.1.6-h10",
        "PAN-OS 11.1.6-h7",
        "PAN-OS 11.1.6-h6",
        "PAN-OS 11.1.6-h4",
        "PAN-OS 11.1.6-h3",
        "PAN-OS 11.1.6-h2",
        "PAN-OS 11.1.6-h1",
        "PAN-OS 11.1.6",
        "PAN-OS 11.1.5-h1",
        "PAN-OS 11.1.5",
        "PAN-OS 11.1.4-h36",
        "PAN-OS 11.1.4-h35",
        "PAN-OS 11.1.4-h34",
        "PAN-OS 11.1.4-h33",
        "PAN-OS 11.1.4-h32",
        "PAN-OS 11.1.4-h27",
        "PAN-OS 11.1.4-h25",
        "PAN-OS 11.1.4-h18",
        "PAN-OS 11.1.4-h17",
        "PAN-OS 11.1.4-h15",
        "PAN-OS 11.1.4-h13",
        "PAN-OS 11.1.4-h12",
        "PAN-OS 11.1.4-h11",
        "PAN-OS 11.1.4-h10",
        "PAN-OS 11.1.4-h9",
        "PAN-OS 11.1.4-h8",
        "PAN-OS 11.1.4-h7",
        "PAN-OS 11.1.4-h6",
        "PAN-OS 11.1.4-h5",
        "PAN-OS 11.1.4-h4",
        "PAN-OS 11.1.4-h3",
        "PAN-OS 11.1.4-h2",
        "PAN-OS 11.1.4-h1",
        "PAN-OS 11.1.4",
        "PAN-OS 11.1.3-h13",
        "PAN-OS 11.1.3-h12",
        "PAN-OS 11.1.3-h11",
        "PAN-OS 11.1.3-h10",
        "PAN-OS 11.1.3-h9",
        "PAN-OS 11.1.3-h8",
        "PAN-OS 11.1.3-h7",
        "PAN-OS 11.1.3-h6",
        "PAN-OS 11.1.3-h5",
        "PAN-OS 11.1.3-h4",
        "PAN-OS 11.1.3-h3",
        "PAN-OS 11.1.3-h2",
        "PAN-OS 11.1.3-h1",
        "PAN-OS 11.1.3",
        "PAN-OS 11.1.2-h18",
        "PAN-OS 11.1.2-h17",
        "PAN-OS 11.1.2-h16",
        "PAN-OS 11.1.2-h15",
        "PAN-OS 11.1.2-h14",
        "PAN-OS 11.1.2-h13",
        "PAN-OS 11.1.2-h12",
        "PAN-OS 11.1.2-h11",
        "PAN-OS 11.1.2-h10",
        "PAN-OS 11.1.2-h9",
        "PAN-OS 11.1.2-h8",
        "PAN-OS 11.1.2-h7",
        "PAN-OS 11.1.2-h6",
        "PAN-OS 11.1.2-h5",
        "PAN-OS 11.1.2-h4",
        "PAN-OS 11.1.2-h3",
        "PAN-OS 11.1.2-h2",
        "PAN-OS 11.1.2-h1",
        "PAN-OS 11.1.2",
        "PAN-OS 11.1.1-h2",
        "PAN-OS 11.1.1-h1",
        "PAN-OS 11.1.1",
        "PAN-OS 11.1.0-h4",
        "PAN-OS 11.1.0-h3",
        "PAN-OS 11.1.0-h2",
        "PAN-OS 11.1.0-h1",
        "PAN-OS 11.1.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0317",
    "datePublished": "2026-10-14T20:21:21.338Z",
    "dateReserved": "2025-11-03T20:45:15.561Z",
    "dateUpdated": "2026-10-15T18:47:53.957Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-0316 (GCVE-0-2026-0316)

    Vulnerability from nvd – Published: 2026-10-14 20:23 – Updated: 2026-10-15 18:42
    VLAI
    Title
    PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability
    Summary
    A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface. The security risk posed by this issue is minimized when the management interface is restricted to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .  This issue is applicable to PAN-OS® software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma® Access are not affected by these vulnerabilities.
    Severity
    1.1 (Low)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
    0.4 (Low)
    CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-15 18:42 UTC
    CWE
    • CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
    Assigner
    palo_alto CNA under the mitre root
    CNA scorecard A 95/100 over 96 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Palo Alto Networks Cloud NGFW Unaffected: All (custom)
    		Create a notification for this product.
    Palo Alto Networks PAN-OS Affected: 12.2.0 , < 12.2.4 (custom)
    Affected: 12.1.0 , < 12.1.10-h2 (custom)
    Affected: 11.2.0 , < 11.2.16 (custom)
    Affected: 11.1.0 , < 11.1.16-h3 (custom)
        cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*
    		Create a notification for this product.
    Palo Alto Networks Prisma Access Unaffected: All , < 12.1.7-h8 (custom)
    		Create a notification for this product.
    Date Public
    2026-10-14 16:00
    Credits
    Palo Alto Networks thanks Michał Skowron and Tomasz Stachowicz with ING Hubs Poland and internal reporter James Otten for discovering and reporting this issue.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0316",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T18:42:12.744482Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T18:42:26.375Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Cloud NGFW",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "affected",
          "product": "PAN-OS",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.2.4",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.2.4",
              "status": "affected",
              "version": "12.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "12.1.10-h2",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.1.10-h2",
              "status": "affected",
              "version": "12.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.2.16",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.2.16",
              "status": "affected",
              "version": "11.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.1.16-h3",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.1.16-h3",
              "status": "affected",
              "version": "11.1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Prisma Access",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.1.7-h8",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.1.7-h8",
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.2.4",
                  "versionStartIncluding": "12.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.1.10-h2",
                  "versionStartIncluding": "12.1.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.2.16",
                  "versionStartIncluding": "11.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.1.16-h3",
                  "versionStartIncluding": "11.1.16",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Palo Alto Networks thanks Micha\u0142 Skowron and Tomasz Stachowicz with ING Hubs Poland and internal reporter James Otten for discovering and reporting this issue."
        }
      ],
      "datePublic": "2026-10-14T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cspan\u003eA stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS\u00ae software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface.\u003c/span\u003e\u003c/p\u003e\u003cp\u003e\u003cspan\u003eThe security risk posed by this issue is minimized when the management interface is restricted to only trusted internal IP addresses according to our recommended\u0026nbsp;\u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431\"\u003e\u003cspan\u003ebest practice deployment guidelines\u003c/span\u003e\u003c/a\u003e.\u0026nbsp;\u003cbr\u003e\u003c/p\u003e\u003cp\u003e\u003cspan\u003eThis issue is applicable to PAN-OS\u00ae software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).\u003c/span\u003e\u003c/p\u003e\u003cp\u003e\u003cspan\u003eCloud NGFW and Prisma\u00ae Access are not affected by these vulnerabilities.\u003c/span\u003e\u003c/p\u003e"
            }
          ],
          "value": "A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS\u00ae software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface.\n\n\n\nThe security risk posed by this issue is minimized when the management interface is restricted to only trusted internal IP addresses according to our recommended\u00a0 best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .\u00a0\n\n\n\n\nThis issue is applicable to PAN-OS\u00ae software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).\n\n\n\nCloud NGFW and Prisma\u00ae Access are not affected by these vulnerabilities."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-592",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-592 Stored XSS"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 1.1,
            "baseSeverity": "LOW",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "The risk is highest when you allow access to the management interface from external IP addresses on the internet."
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "ADJACENT",
            "baseScore": 0.4,
            "baseSeverity": "LOW",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "You can reduce the risk of exploitation by restricting access to a jump box as the only system allowed to access the management interface."
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T20:23:03.075Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "name": "PAN-OS Security Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0316"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eCloud NGFW\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePAN-OS 12.2\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e12.2.0 through 12.2.3\u003c/td\u003e\u003ctd\u003eUpgrade to 12.2.4 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 12.1\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.1.2 through\u0026nbsp;12.1.10-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to\u0026nbsp;12.1.10-h2 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 11.2\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.0 through\u0026nbsp;11.2.15 \u003c/td\u003e\n                                \u003ctd\u003eUpgrade to\u0026nbsp;11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 11.1\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.0 through\u0026nbsp;11.1.16-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eAll older\u003cbr\u003eunsupported\u003cbr\u003ePAN-OS versions\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eUpgrade to a supported fixed version.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePrisma Access\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "Version\nMinor Version\nSuggested Solution\nCloud NGFW\nNo action needed.PAN-OS 12.2\n12.2.0 through 12.2.3Upgrade to 12.2.4 or later.\n                                PAN-OS 12.1\n\n                                12.1.2 through\u00a012.1.10-h*\n                                Upgrade to\u00a012.1.10-h2 or later.\n                            \n                                PAN-OS 11.2\n\n                                11.2.0 through\u00a011.2.15 \n                                Upgrade to\u00a011.2.16 or later.\n                            \n                                PAN-OS 11.1\n\n                                11.1.0 through\u00a011.1.16-h*\n                                Upgrade to 11.1.16-h3 or later.\n                            All older\nunsupported\nPAN-OS versions\u00a0Upgrade to a supported fixed version.Prisma Access\nNo action needed."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-14T16:00:00.000Z",
          "value": "Initial publication."
        }
      ],
      "title": "PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No known workarounds exist for this issue."
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_affectedList": [
        "PAN-OS 12.2.3",
        "PAN-OS 12.2.2",
        "PAN-OS 12.1.10",
        "PAN-OS 12.1.9",
        "PAN-OS 12.1.8",
        "PAN-OS 12.1.7-h6",
        "PAN-OS 12.1.7-h5",
        "PAN-OS 12.1.7-h3",
        "PAN-OS 12.1.7-h2",
        "PAN-OS 12.1.7-h1",
        "PAN-OS 12.1.7",
        "PAN-OS 12.1.6",
        "PAN-OS 12.1.5",
        "PAN-OS 12.1.4-h11",
        "PAN-OS 12.1.4-h10",
        "PAN-OS 12.1.4-h9",
        "PAN-OS 12.1.4-h8",
        "PAN-OS 12.1.4-h7",
        "PAN-OS 12.1.4-h6",
        "PAN-OS 12.1.4-h5",
        "PAN-OS 12.1.4-h3",
        "PAN-OS 12.1.4-h2",
        "PAN-OS 12.1.4",
        "PAN-OS 12.1.3-h3",
        "PAN-OS 12.1.3-h1",
        "PAN-OS 12.1.3",
        "PAN-OS 12.1.2",
        "PAN-OS 11.2.15",
        "PAN-OS 11.2.13-h2",
        "PAN-OS 11.2.13-h1",
        "PAN-OS 11.2.13",
        "PAN-OS 11.2.12",
        "PAN-OS 11.2.11",
        "PAN-OS 11.2.10-h14",
        "PAN-OS 11.2.10-h13",
        "PAN-OS 11.2.10-h12",
        "PAN-OS 11.2.10-h10",
        "PAN-OS 11.2.10-h9",
        "PAN-OS 11.2.10-h8",
        "PAN-OS 11.2.10-h7",
        "PAN-OS 11.2.10-h6",
        "PAN-OS 11.2.10-h5",
        "PAN-OS 11.2.10-h4",
        "PAN-OS 11.2.10-h3",
        "PAN-OS 11.2.10-h2",
        "PAN-OS 11.2.10-h1",
        "PAN-OS 11.2.10",
        "PAN-OS 11.2.9",
        "PAN-OS 11.2.8",
        "PAN-OS 11.2.7-h20",
        "PAN-OS 11.2.7-h19",
        "PAN-OS 11.2.7-h18",
        "PAN-OS 11.2.7-h17",
        "PAN-OS 11.2.7-h16",
        "PAN-OS 11.2.7-h15",
        "PAN-OS 11.2.7-h14",
        "PAN-OS 11.2.7-h13",
        "PAN-OS 11.2.7-h12",
        "PAN-OS 11.2.7-h11",
        "PAN-OS 11.2.7-h10",
        "PAN-OS 11.2.7-h8",
        "PAN-OS 11.2.7-h7",
        "PAN-OS 11.2.7-h4",
        "PAN-OS 11.2.7-h3",
        "PAN-OS 11.2.7-h2",
        "PAN-OS 11.2.7-h1",
        "PAN-OS 11.2.7",
        "PAN-OS 11.2.6",
        "PAN-OS 11.2.5",
        "PAN-OS 11.2.4-h21",
        "PAN-OS 11.2.4-h20",
        "PAN-OS 11.2.4-h18",
        "PAN-OS 11.2.4-h17",
        "PAN-OS 11.2.4-h15",
        "PAN-OS 11.2.4-h14",
        "PAN-OS 11.2.4-h12",
        "PAN-OS 11.2.4-h11",
        "PAN-OS 11.2.4-h10",
        "PAN-OS 11.2.4-h9",
        "PAN-OS 11.2.4-h8",
        "PAN-OS 11.2.4-h7",
        "PAN-OS 11.2.4-h6",
        "PAN-OS 11.2.4-h5",
        "PAN-OS 11.2.4-h4",
        "PAN-OS 11.2.4-h3",
        "PAN-OS 11.2.4-h2",
        "PAN-OS 11.2.4-h1",
        "PAN-OS 11.2.4",
        "PAN-OS 11.2.3-h5",
        "PAN-OS 11.2.3-h4",
        "PAN-OS 11.2.3-h3",
        "PAN-OS 11.2.3-h2",
        "PAN-OS 11.2.3-h1",
        "PAN-OS 11.2.3",
        "PAN-OS 11.2.2-h2",
        "PAN-OS 11.2.2-h1",
        "PAN-OS 11.2.1-h1",
        "PAN-OS 11.2.1",
        "PAN-OS 11.2.0-h1",
        "PAN-OS 11.2.0",
        "PAN-OS 11.1.16-h2",
        "PAN-OS 11.1.16-h1",
        "PAN-OS 11.1.16",
        "PAN-OS 11.1.15",
        "PAN-OS 11.1.14",
        "PAN-OS 11.1.13-h12",
        "PAN-OS 11.1.13-h11",
        "PAN-OS 11.1.13-h10",
        "PAN-OS 11.1.13-h9",
        "PAN-OS 11.1.13-h8",
        "PAN-OS 11.1.13-h7",
        "PAN-OS 11.1.13-h6",
        "PAN-OS 11.1.13-h5",
        "PAN-OS 11.1.13-h3",
        "PAN-OS 11.1.13-h2",
        "PAN-OS 11.1.13-h1",
        "PAN-OS 11.1.13",
        "PAN-OS 11.1.12",
        "PAN-OS 11.1.11",
        "PAN-OS 11.1.10-h33",
        "PAN-OS 11.1.10-h32",
        "PAN-OS 11.1.10-h30",
        "PAN-OS 11.1.10-h28",
        "PAN-OS 11.1.10-h27",
        "PAN-OS 11.1.10-h26",
        "PAN-OS 11.1.10-h25",
        "PAN-OS 11.1.10-h21",
        "PAN-OS 11.1.10-h12",
        "PAN-OS 11.1.10-h10",
        "PAN-OS 11.1.10-h9",
        "PAN-OS 11.1.10-h7",
        "PAN-OS 11.1.10-h5",
        "PAN-OS 11.1.10-h4",
        "PAN-OS 11.1.10-h1",
        "PAN-OS 11.1.10",
        "PAN-OS 11.1.9",
        "PAN-OS 11.1.8",
        "PAN-OS 11.1.6-h38",
        "PAN-OS 11.1.6-h36",
        "PAN-OS 11.1.6-h35",
        "PAN-OS 11.1.6-h34",
        "PAN-OS 11.1.6-h33",
        "PAN-OS 11.1.6-h32",
        "PAN-OS 11.1.6-h29",
        "PAN-OS 11.1.6-h25",
        "PAN-OS 11.1.6-h23",
        "PAN-OS 11.1.6-h22",
        "PAN-OS 11.1.6-h21",
        "PAN-OS 11.1.6-h20",
        "PAN-OS 11.1.6-h19",
        "PAN-OS 11.1.6-h18",
        "PAN-OS 11.1.6-h17",
        "PAN-OS 11.1.6-h14",
        "PAN-OS 11.1.6-h10",
        "PAN-OS 11.1.6-h7",
        "PAN-OS 11.1.6-h6",
        "PAN-OS 11.1.6-h4",
        "PAN-OS 11.1.6-h3",
        "PAN-OS 11.1.6-h2",
        "PAN-OS 11.1.6-h1",
        "PAN-OS 11.1.6",
        "PAN-OS 11.1.5-h1",
        "PAN-OS 11.1.5",
        "PAN-OS 11.1.4-h36",
        "PAN-OS 11.1.4-h35",
        "PAN-OS 11.1.4-h34",
        "PAN-OS 11.1.4-h33",
        "PAN-OS 11.1.4-h32",
        "PAN-OS 11.1.4-h27",
        "PAN-OS 11.1.4-h25",
        "PAN-OS 11.1.4-h18",
        "PAN-OS 11.1.4-h17",
        "PAN-OS 11.1.4-h15",
        "PAN-OS 11.1.4-h13",
        "PAN-OS 11.1.4-h12",
        "PAN-OS 11.1.4-h11",
        "PAN-OS 11.1.4-h10",
        "PAN-OS 11.1.4-h9",
        "PAN-OS 11.1.4-h8",
        "PAN-OS 11.1.4-h7",
        "PAN-OS 11.1.4-h6",
        "PAN-OS 11.1.4-h5",
        "PAN-OS 11.1.4-h4",
        "PAN-OS 11.1.4-h3",
        "PAN-OS 11.1.4-h2",
        "PAN-OS 11.1.4-h1",
        "PAN-OS 11.1.4",
        "PAN-OS 11.1.3-h13",
        "PAN-OS 11.1.3-h12",
        "PAN-OS 11.1.3-h11",
        "PAN-OS 11.1.3-h10",
        "PAN-OS 11.1.3-h9",
        "PAN-OS 11.1.3-h8",
        "PAN-OS 11.1.3-h7",
        "PAN-OS 11.1.3-h6",
        "PAN-OS 11.1.3-h5",
        "PAN-OS 11.1.3-h4",
        "PAN-OS 11.1.3-h3",
        "PAN-OS 11.1.3-h2",
        "PAN-OS 11.1.3-h1",
        "PAN-OS 11.1.3",
        "PAN-OS 11.1.2-h18",
        "PAN-OS 11.1.2-h17",
        "PAN-OS 11.1.2-h16",
        "PAN-OS 11.1.2-h15",
        "PAN-OS 11.1.2-h14",
        "PAN-OS 11.1.2-h13",
        "PAN-OS 11.1.2-h12",
        "PAN-OS 11.1.2-h11",
        "PAN-OS 11.1.2-h10",
        "PAN-OS 11.1.2-h9",
        "PAN-OS 11.1.2-h8",
        "PAN-OS 11.1.2-h7",
        "PAN-OS 11.1.2-h6",
        "PAN-OS 11.1.2-h5",
        "PAN-OS 11.1.2-h4",
        "PAN-OS 11.1.2-h3",
        "PAN-OS 11.1.2-h2",
        "PAN-OS 11.1.2-h1",
        "PAN-OS 11.1.2",
        "PAN-OS 11.1.1-h2",
        "PAN-OS 11.1.1-h1",
        "PAN-OS 11.1.1",
        "PAN-OS 11.1.0-h4",
        "PAN-OS 11.1.0-h3",
        "PAN-OS 11.1.0-h2",
        "PAN-OS 11.1.0-h1",
        "PAN-OS 11.1.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0316",
    "datePublished": "2026-10-14T20:23:03.075Z",
    "dateReserved": "2025-11-03T20:45:14.651Z",
    "dateUpdated": "2026-10-15T18:42:26.375Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-0315 (GCVE-0-2026-0315)

    Vulnerability from nvd – Published: 2026-10-14 20:24 – Updated: 2026-10-16 03:56
    VLAI
    Title
    GlobalProtect App: Local Privilege Escalation Vulnerability on macOS
    Summary
    A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on Linux, Windows, iOS, Android and Chrome OS is not affected by this vulnerability.
    Severity
    5.9 (Medium)
    CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-15 00:00 UTC
    CWE
    Assigner
    palo_alto CNA under the mitre root
    CNA scorecard A 95/100 over 96 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Palo Alto Networks GlobalProtect App Affected: 6.2.0 , < 6.2.8-h15 (custom)
    Affected: 6.3.0 , < 6.3.3-h16 (custom)
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:macOS:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:macOS:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*
    		Create a notification for this product.
    Palo Alto Networks GlobalProtect App Unaffected: All , < 12.2.4 (custom)
    		Create a notification for this product.
    Date Public
    2026-10-14 16:00
    Credits
    Ronen Seleri and Shahaf Pruss of Blyde Labs Christopher Ellis of Workday James Otten (internal reporter)
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0315",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-16T03:56:58.518Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.2.8-h15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h15",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.3.3-h16",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h16",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux",
            "Windows",
            "iOS",
            "Android",
            "ChromeOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.2.4",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.2.4",
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.2.8-h15",
                  "versionStartIncluding": "6.2.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.3.3-h16",
                  "versionStartIncluding": "6.3.3",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Ronen Seleri and Shahaf Pruss of Blyde Labs"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Christopher Ellis of Workday"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "James Otten (internal reporter)"
        }
      ],
      "datePublic": "2026-10-14T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003eA local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect\u2122 app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to execute arbitrary commands with administrative privileges.\u003c/span\u003e\u003cb\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003c/b\u003e\u003cspan\u003eThe GlobalProtect app on Linux, Windows, iOS, Android and Chrome OS is not affected by this vulnerability.\u003c/span\u003e"
            }
          ],
          "value": "A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect\u2122 app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to execute arbitrary commands with administrative privileges.\n\nThe GlobalProtect app on Linux, Windows, iOS, Android and Chrome OS is not affected by this vulnerability."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-233 Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-426",
              "description": "CWE-426 Untrusted Search Path",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T20:24:21.191Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "name": "PAN-OS Security Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0315"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003c/th\u003e\u003cth\u003e\u0026nbsp;\u003cb\u003eMinor Version\u003c/b\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on macOS\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h15\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h16 (\u003cspan\u003e6.3.3-1199\u003c/span\u003e) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on macOS\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h14\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h15 (6.2.8-1084) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Linux \u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Windows\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on ChromeOS\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "Version\u00a0Minor VersionSuggested SolutionGlobalProtect App 6.3 on macOS6.3.0 through 6.3.3-h15Upgrade to 6.3.3-h16 (6.3.3-1199) or later.GlobalProtect App 6.2 on macOS6.2.0 through 6.2.8-h14\nUpgrade to 6.2.8-h15 (6.2.8-1084) or later.GlobalProtect App on Linux \n\u00a0No action needed.GlobalProtect App on Windows\u00a0No action needed.GlobalProtect App on iOS\u00a0No action needed.GlobalProtect App on Android\u00a0No action needed.GlobalProtect App on ChromeOS\u00a0No action needed."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-14T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "GlobalProtect App: Local Privilege Escalation Vulnerability on macOS",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No known workarounds exist for this issue."
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.3",
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0315",
    "datePublished": "2026-10-14T20:24:21.191Z",
    "dateReserved": "2025-11-03T20:45:13.819Z",
    "dateUpdated": "2026-10-16T03:56:58.518Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-0314 (GCVE-0-2026-0314)

    Vulnerability from nvd – Published: 2026-10-14 20:25 – Updated: 2026-10-15 18:41
    VLAI
    Title
    GlobalProtect App: Local Denial of Service (DoS) on Windows
    Summary
    A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition. The GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability.
    Severity
    4.3 (Medium)
    CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-15 18:41 UTC
    CWE
    • CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')
    Assigner
    palo_alto CNA under the mitre root
    CNA scorecard A 95/100 over 96 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Palo Alto Networks GlobalProtect App Affected: 6.3.0 , < 6.3.3-h16 (custom)
    Affected: 6.2.0 , < 6.2.8-h15 (custom)
    Affected: 6.0.0 , < 6.0.15 (custom)
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*
    		Create a notification for this product.
    Palo Alto Networks GlobalProtect App Unaffected: All , < 12.2.4 (custom)
    		Create a notification for this product.
    Date Public
    2026-10-14 16:00
    Credits
    Artemy Tsetsersky an internal security researcher
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0314",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T18:41:42.318399Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T18:41:54.691Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h16",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h16",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h15",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux",
            "macOS",
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.2.4",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.2.4",
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003eNo special configuration is required to be affected by this issue.\u003c/span\u003e"
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Windows:*:*",
                  "versionEndExcluding": "6.3.3-h16",
                  "versionStartIncluding": "6.3.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Windows:*:*",
                  "versionEndExcluding": "6.2.8-h15",
                  "versionStartIncluding": "6.2.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Windows:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Artemy Tsetsersky"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "an internal security researcher"
        }
      ],
      "datePublic": "2026-10-14T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003eA type confusion vulnerability in Palo Alto Networks GlobalProtect\u2122 app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition.\u003c/span\u003e\u003cbr\u003e\u003cbr\u003e\u003cspan\u003eThe GlobalProtect\u2122 app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability.\u003c/span\u003e"
            }
          ],
          "value": "A type confusion vulnerability in Palo Alto Networks GlobalProtect\u2122 app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition.\n\nThe GlobalProtect\u2122 app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-153",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-153 Input Data Manipulation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-843",
              "description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T20:25:32.075Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "name": "PAN-OS Security Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0314"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003c/th\u003e\u003cth\u003eMinor Version\u003c/th\u003e\u003cth\u003eSuggested Solution\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on Windows\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h15\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h16 (6.3.3-1199) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on Windows\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h14\u003c/td\u003e\u003ctd\u003eUpgrade to\u0026nbsp;6.2.8-h15 (6.2.8-1084) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Window\u003cb\u003es\u003c/b\u003e\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u0026nbsp;\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Linux\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on macOS\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Chrome OS\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eAll older unsupported GlobalProtect App versions\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eUpgrade to a supported fixed version.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VersionMinor VersionSuggested SolutionGlobalProtect App 6.3 on Windows6.3.0 through 6.3.3-h15\nUpgrade to 6.3.3-h16 (6.3.3-1199) or later.GlobalProtect App 6.2 on Windows6.2.0 through 6.2.8-h14Upgrade to\u00a06.2.8-h15 (6.2.8-1084) or later.GlobalProtect App 6.0 on Windows6.0.0 through 6.0.14Upgrade to 6.0.15 or later.\u00a0GlobalProtect App on Linux\u00a0No action needed.GlobalProtect App on macOS\u00a0No action needed.GlobalProtect App on iOS\u00a0No action needed.GlobalProtect App on Android\u00a0No action needed.GlobalProtect App on Chrome OS\u00a0No action needed.All older unsupported GlobalProtect App versions\u00a0Upgrade to a supported fixed version."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-14T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "GlobalProtect App: Local Denial of Service (DoS) on Windows",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No known workarounds exist for this issue."
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.3",
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.0.14",
        "GlobalProtect App 6.0.13",
        "GlobalProtect App 6.0.12",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0314",
    "datePublished": "2026-10-14T20:25:32.075Z",
    "dateReserved": "2025-11-03T20:45:12.840Z",
    "dateUpdated": "2026-10-15T18:41:54.691Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-0313 (GCVE-0-2026-0313)

    Vulnerability from nvd – Published: 2026-10-14 20:27 – Updated: 2026-10-16 03:56
    VLAI
    Title
    Cortex XSOAR: OS Command Injection Vulnerability
    Summary
    A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints.
    Severity
    6.1 (Medium)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-15 00:00 UTC
    CWE
    • CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
    Assigner
    palo_alto CNA under the mitre root
    CNA scorecard A 95/100 over 96 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Palo Alto Networks Cortex XSOAR OS Query Affected: 0 , < 1.0.17 (custom)
        cpe:2.3:a:palo_alto_networks:cortex_xsoar_os_query:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Palo Alto Networks Cortex XSIAM OS Query Affected: 0 , < 1.0.17 (custom)
        cpe:2.3:a:palo_alto_networks:cortex_xsiam_os_query:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Date Public
    2026-10-14 16:00
    Credits
    Mohamed Lemine Ahmed Jidou (AegisSec)
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0313",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-16T03:56:57.198Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Cortex XSOAR OS Query",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "1.0.17",
                  "status": "unaffected"
                }
              ],
              "lessThan": "1.0.17",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Cortex XSIAM OS Query",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "1.0.17",
                  "status": "unaffected"
                }
              ],
              "lessThan": "1.0.17",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "This issue requires the OS Query content pack and the SSH integration to be installed and configured in Cortex XSOAR or Cortex XSIAM."
            }
          ],
          "value": "This issue requires the OS Query content pack and the SSH integration to be installed and configured in Cortex XSOAR or Cortex XSIAM."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:cortex_xsoar_os_query:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "1.0.17",
                  "versionStartIncluding": "1.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:cortex_xsiam_os_query:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "1.0.17",
                  "versionStartIncluding": "1.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Mohamed Lemine Ahmed Jidou (AegisSec)"
        }
      ],
      "datePublic": "2026-10-14T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints.\u003c/p\u003e"
            }
          ],
          "value": "A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-88",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-88 OS Command Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T20:27:19.112Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "name": "PAN-OS Security Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0313"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003c/th\u003e\u003cth\u003eMinor Version\u003c/th\u003e\u003cth\u003eSuggested Solution\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eCortex XSOAR\u0026nbsp;OS Query\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eUpdate to 1.0.17 or later from the Cortex XSOAR Marketplace.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eCortex XSIAM OS Query\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eUpdate to 1.0.17 or later from the Cortex XSOAR Marketplace.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VersionMinor VersionSuggested SolutionCortex XSOAR\u00a0OS QueryUpdate to 1.0.17 or later from the Cortex XSOAR Marketplace.Cortex XSIAM OS Query\u00a0Update to 1.0.17 or later from the Cortex XSOAR Marketplace."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-14T16:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "Cortex XSOAR: OS Command Injection Vulnerability",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Customers who are unable to upgrade immediately can mitigate this issue by disabling the OSQueryBasicQuery automation in Cortex XSOAR or Cortex XSIAM."
            }
          ],
          "value": "Customers who are unable to upgrade immediately can mitigate this issue by disabling the OSQueryBasicQuery automation in Cortex XSOAR or Cortex XSIAM."
        }
      ],
      "x_affectedList": [
        "Cortex XSOAR OS Query 1.0.0",
        "Cortex XSOAR OS Query 1.0.1",
        "Cortex XSOAR OS Query 1.0.2",
        "Cortex XSOAR OS Query 1.0.3",
        "Cortex XSOAR OS Query 1.0.4",
        "Cortex XSOAR OS Query 1.0.5",
        "Cortex XSOAR OS Query 1.0.6",
        "Cortex XSOAR OS Query 1.0.7",
        "Cortex XSOAR OS Query 1.0.8",
        "Cortex XSOAR OS Query 1.0.9",
        "Cortex XSOAR OS Query 1.0.10",
        "Cortex XSOAR OS Query 1.0.11",
        "Cortex XSOAR OS Query 1.0.12",
        "Cortex XSOAR OS Query 1.0.13",
        "Cortex XSOAR OS Query 1.0.14",
        "Cortex XSOAR OS Query 1.0.15",
        "Cortex XSOAR OS Query 1.0.16",
        "Cortex XSIAM OS Query 1.0.0",
        "Cortex XSIAM OS Query 1.0.1",
        "Cortex XSIAM OS Query 1.0.2",
        "Cortex XSIAM OS Query 1.0.3",
        "Cortex XSIAM OS Query 1.0.4",
        "Cortex XSIAM OS Query 1.0.5",
        "Cortex XSIAM OS Query 1.0.6",
        "Cortex XSIAM OS Query 1.0.7",
        "Cortex XSIAM OS Query 1.0.8",
        "Cortex XSIAM OS Query 1.0.9",
        "Cortex XSIAM OS Query 1.0.10",
        "Cortex XSIAM OS Query 1.0.11",
        "Cortex XSIAM OS Query 1.0.12",
        "Cortex XSIAM OS Query 1.0.13",
        "Cortex XSIAM OS Query 1.0.14",
        "Cortex XSIAM OS Query 1.0.15",
        "Cortex XSIAM OS Query 1.0.16"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0313",
    "datePublished": "2026-10-14T20:27:19.112Z",
    "dateReserved": "2025-11-03T20:45:12.007Z",
    "dateUpdated": "2026-10-16T03:56:57.198Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-0312 (GCVE-0-2026-0312)

    Vulnerability from nvd – Published: 2026-10-14 20:28 – Updated: 2026-10-15 18:40
    VLAI
    Title
    Checkov by Prisma Cloud: Path Traversal Vulnerabilities
    Summary
    Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem.
    Severity
    4.3 (Medium)
    CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-15 18:40 UTC
    CWE
    • CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
    Assigner
    palo_alto CNA under the mitre root
    CNA scorecard A 95/100 over 96 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Palo Alto Networks Checkov by Prisma Cloud Affected: 0 , < 3.3.25 (custom)
        cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Date Public
    2026-10-14 16:00
    Credits
    Muhammad Ibrahim Yuze Pan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0312",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T18:40:14.862502Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T18:40:29.605Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Checkov by Prisma Cloud",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "3.3.25",
                  "status": "unaffected"
                }
              ],
              "lessThan": "3.3.25",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "3.3.25",
                  "versionStartIncluding": "3.3.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Muhammad Ibrahim"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Yuze Pan"
        }
      ],
      "datePublic": "2026-10-14T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003ePath traversal vulnerabilities in Palo Alto Networks Checkov by Prisma\u00ae Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem.\u003c/span\u003e"
            }
          ],
          "value": "Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma\u00ae Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of these issues."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of these issues."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-126",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-126 Path Traversal"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T20:28:18.276Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "name": "Checkov Security Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0312"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eCheckov by Prisma Cloud 3.3\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e3.2.0 through 3.3.24\u003c/td\u003e\u003ctd\u003eUpgrade to 3.3.25 or later.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003cbr\u003eCheckov integration in Prisma Cloud is upgraded automatically when new versions become available."
            }
          ],
          "value": "Version\nMinor Version\nSuggested Solution\nCheckov by Prisma Cloud 3.3\n3.2.0 through 3.3.24Upgrade to 3.3.25 or later.\nCheckov integration in Prisma Cloud is upgraded automatically when new versions become available."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-14T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "Checkov by Prisma Cloud: Path Traversal Vulnerabilities",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cspan\u003eUntil a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory.\u003c/span\u003e\u003cbr\u003e\u003c/p\u003e"
            }
          ],
          "value": "Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory."
        }
      ],
      "x_affectedList": [
        "Checkov by Prisma Cloud 3.3.0",
        "Checkov by Prisma Cloud 3.3.1",
        "Checkov by Prisma Cloud 3.3.2",
        "Checkov by Prisma Cloud 3.3.3",
        "Checkov by Prisma Cloud 3.3.4",
        "Checkov by Prisma Cloud 3.3.5",
        "Checkov by Prisma Cloud 3.3.6",
        "Checkov by Prisma Cloud 3.3.7",
        "Checkov by Prisma Cloud 3.3.8",
        "Checkov by Prisma Cloud 3.3.9",
        "Checkov by Prisma Cloud 3.3.10",
        "Checkov by Prisma Cloud 3.3.11",
        "Checkov by Prisma Cloud 3.3.12",
        "Checkov by Prisma Cloud 3.3.13",
        "Checkov by Prisma Cloud 3.3.14",
        "Checkov by Prisma Cloud 3.3.15",
        "Checkov by Prisma Cloud 3.3.16",
        "Checkov by Prisma Cloud 3.3.17",
        "Checkov by Prisma Cloud 3.3.18",
        "Checkov by Prisma Cloud 3.3.19",
        "Checkov by Prisma Cloud 3.3.20",
        "Checkov by Prisma Cloud 3.3.21",
        "Checkov by Prisma Cloud 3.3.22",
        "Checkov by Prisma Cloud 3.3.23",
        "Checkov by Prisma Cloud 3.3.24"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0312",
    "datePublished": "2026-10-14T20:28:18.276Z",
    "dateReserved": "2025-11-03T20:45:11.196Z",
    "dateUpdated": "2026-10-15T18:40:29.605Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-0311 (GCVE-0-2026-0311)

    Vulnerability from nvd – Published: 2026-10-14 20:29 – Updated: 2026-10-15 16:43
    VLAI
    Title
    Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability
    Summary
    A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.
    Severity
    1.1 (Low)
    CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:L/SI:L/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-15 16:19 UTC
    CWE
    • CWE-918 - Server-Side Request Forgery (SSRF)
    Assigner
    palo_alto CNA under the mitre root
    CNA scorecard A 95/100 over 96 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Palo Alto Networks Checkov by Prisma Cloud Affected: 0 , < 3.2.533 (custom)
        cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Date Public
    2026-10-14 16:00
    Credits
    Muhammad Ibrahim
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0311",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T16:19:42.105391Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T16:43:45.351Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Checkov by Prisma Cloud",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "3.2.533",
                  "status": "unaffected"
                }
              ],
              "lessThan": "3.2.533",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNo special configuration is required.\u0026nbsp;\u003cbr\u003e\u003c/p\u003e"
            }
          ],
          "value": "No special configuration is required."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "3.2.533",
                  "versionStartIncluding": "3.2.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Muhammad Ibrahim"
        }
      ],
      "datePublic": "2026-10-14T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cspan\u003eA server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.\u003c/span\u003e\u003cbr\u003e\u003c/p\u003e"
            }
          ],
          "value": "A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-664",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-664 Server Side Request Forgery"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 1.1,
            "baseSeverity": "LOW",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "LOW",
            "userInteraction": "PASSIVE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:L/SI:L/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "CWE-918 Server-Side Request Forgery (SSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T20:29:19.297Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "name": "Checkov Security Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0311"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eCheckov by Prisma Cloud\u003c/td\u003e\u003ctd\u003e\u003cspan\u003e3.2.0 through 3.2.532\u003c/span\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to\u0026nbsp;3.2.533\u0026nbsp;or later.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003cbr\u003eCheckov integration in Prisma Cloud is upgraded automatically when new versions become available."
            }
          ],
          "value": "Version\nMinor Version\nSuggested Solution\nCheckov by Prisma Cloud3.2.0 through 3.2.532Upgrade to\u00a03.2.533\u00a0or later.\nCheckov integration in Prisma Cloud is upgraded automatically when new versions become available."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-14T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory."
            }
          ],
          "value": "Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory."
        }
      ],
      "x_affectedList": [
        "Checkov by Prisma Cloud 3.2.0",
        "Checkov by Prisma Cloud 3.2.1",
        "Checkov by Prisma Cloud 3.2.2",
        "Checkov by Prisma Cloud 3.2.3",
        "Checkov by Prisma Cloud 3.2.4",
        "Checkov by Prisma Cloud 3.2.5",
        "Checkov by Prisma Cloud 3.2.6",
        "Checkov by Prisma Cloud 3.2.7",
        "Checkov by Prisma Cloud 3.2.8",
        "Checkov by Prisma Cloud 3.2.9",
        "Checkov by Prisma Cloud 3.2.10",
        "Checkov by Prisma Cloud 3.2.11",
        "Checkov by Prisma Cloud 3.2.12",
        "Checkov by Prisma Cloud 3.2.13",
        "Checkov by Prisma Cloud 3.2.14",
        "Checkov by Prisma Cloud 3.2.15",
        "Checkov by Prisma Cloud 3.2.16",
        "Checkov by Prisma Cloud 3.2.17",
        "Checkov by Prisma Cloud 3.2.18",
        "Checkov by Prisma Cloud 3.2.19",
        "Checkov by Prisma Cloud 3.2.20",
        "Checkov by Prisma Cloud 3.2.21",
        "Checkov by Prisma Cloud 3.2.22",
        "Checkov by Prisma Cloud 3.2.23",
        "Checkov by Prisma Cloud 3.2.24",
        "Checkov by Prisma Cloud 3.2.25",
        "Checkov by Prisma Cloud 3.2.26",
        "Checkov by Prisma Cloud 3.2.27",
        "Checkov by Prisma Cloud 3.2.28",
        "Checkov by Prisma Cloud 3.2.29",
        "Checkov by Prisma Cloud 3.2.30",
        "Checkov by Prisma Cloud 3.2.31",
        "Checkov by Prisma Cloud 3.2.32",
        "Checkov by Prisma Cloud 3.2.33",
        "Checkov by Prisma Cloud 3.2.34",
        "Checkov by Prisma Cloud 3.2.35",
        "Checkov by Prisma Cloud 3.2.36",
        "Checkov by Prisma Cloud 3.2.37",
        "Checkov by Prisma Cloud 3.2.38",
        "Checkov by Prisma Cloud 3.2.39",
        "Checkov by Prisma Cloud 3.2.40",
        "Checkov by Prisma Cloud 3.2.41",
        "Checkov by Prisma Cloud 3.2.42",
        "Checkov by Prisma Cloud 3.2.43",
        "Checkov by Prisma Cloud 3.2.44",
        "Checkov by Prisma Cloud 3.2.45",
        "Checkov by Prisma Cloud 3.2.46",
        "Checkov by Prisma Cloud 3.2.47",
        "Checkov by Prisma Cloud 3.2.48",
        "Checkov by Prisma Cloud 3.2.49",
        "Checkov by Prisma Cloud 3.2.50",
        "Checkov by Prisma Cloud 3.2.51",
        "Checkov by Prisma Cloud 3.2.52",
        "Checkov by Prisma Cloud 3.2.53",
        "Checkov by Prisma Cloud 3.2.54",
        "Checkov by Prisma Cloud 3.2.55",
        "Checkov by Prisma Cloud 3.2.56",
        "Checkov by Prisma Cloud 3.2.57",
        "Checkov by Prisma Cloud 3.2.58",
        "Checkov by Prisma Cloud 3.2.59",
        "Checkov by Prisma Cloud 3.2.60",
        "Checkov by Prisma Cloud 3.2.61",
        "Checkov by Prisma Cloud 3.2.62",
        "Checkov by Prisma Cloud 3.2.63",
        "Checkov by Prisma Cloud 3.2.64",
        "Checkov by Prisma Cloud 3.2.65",
        "Checkov by Prisma Cloud 3.2.66",
        "Checkov by Prisma Cloud 3.2.67",
        "Checkov by Prisma Cloud 3.2.68",
        "Checkov by Prisma Cloud 3.2.69",
        "Checkov by Prisma Cloud 3.2.70",
        "Checkov by Prisma Cloud 3.2.71",
        "Checkov by Prisma Cloud 3.2.72",
        "Checkov by Prisma Cloud 3.2.73",
        "Checkov by Prisma Cloud 3.2.74",
        "Checkov by Prisma Cloud 3.2.75",
        "Checkov by Prisma Cloud 3.2.76",
        "Checkov by Prisma Cloud 3.2.77",
        "Checkov by Prisma Cloud 3.2.78",
        "Checkov by Prisma Cloud 3.2.79",
        "Checkov by Prisma Cloud 3.2.80",
        "Checkov by Prisma Cloud 3.2.81",
        "Checkov by Prisma Cloud 3.2.82",
        "Checkov by Prisma Cloud 3.2.83",
        "Checkov by Prisma Cloud 3.2.84",
        "Checkov by Prisma Cloud 3.2.85",
        "Checkov by Prisma Cloud 3.2.86",
        "Checkov by Prisma Cloud 3.2.87",
        "Checkov by Prisma Cloud 3.2.88",
        "Checkov by Prisma Cloud 3.2.89",
        "Checkov by Prisma Cloud 3.2.90",
        "Checkov by Prisma Cloud 3.2.91",
        "Checkov by Prisma Cloud 3.2.92",
        "Checkov by Prisma Cloud 3.2.93",
        "Checkov by Prisma Cloud 3.2.94",
        "Checkov by Prisma Cloud 3.2.95",
        "Checkov by Prisma Cloud 3.2.96",
        "Checkov by Prisma Cloud 3.2.97",
        "Checkov by Prisma Cloud 3.2.98",
        "Checkov by Prisma Cloud 3.2.99",
        "Checkov by Prisma Cloud 3.2.100",
        "Checkov by Prisma Cloud 3.2.101",
        "Checkov by Prisma Cloud 3.2.102",
        "Checkov by Prisma Cloud 3.2.103",
        "Checkov by Prisma Cloud 3.2.104",
        "Checkov by Prisma Cloud 3.2.105",
        "Checkov by Prisma Cloud 3.2.106",
        "Checkov by Prisma Cloud 3.2.107",
        "Checkov by Prisma Cloud 3.2.108",
        "Checkov by Prisma Cloud 3.2.109",
        "Checkov by Prisma Cloud 3.2.110",
        "Checkov by Prisma Cloud 3.2.111",
        "Checkov by Prisma Cloud 3.2.112",
        "Checkov by Prisma Cloud 3.2.113",
        "Checkov by Prisma Cloud 3.2.114",
        "Checkov by Prisma Cloud 3.2.115",
        "Checkov by Prisma Cloud 3.2.116",
        "Checkov by Prisma Cloud 3.2.117",
        "Checkov by Prisma Cloud 3.2.118",
        "Checkov by Prisma Cloud 3.2.119",
        "Checkov by Prisma Cloud 3.2.120",
        "Checkov by Prisma Cloud 3.2.121",
        "Checkov by Prisma Cloud 3.2.122",
        "Checkov by Prisma Cloud 3.2.123",
        "Checkov by Prisma Cloud 3.2.124",
        "Checkov by Prisma Cloud 3.2.125",
        "Checkov by Prisma Cloud 3.2.126",
        "Checkov by Prisma Cloud 3.2.127",
        "Checkov by Prisma Cloud 3.2.128",
        "Checkov by Prisma Cloud 3.2.129",
        "Checkov by Prisma Cloud 3.2.130",
        "Checkov by Prisma Cloud 3.2.131",
        "Checkov by Prisma Cloud 3.2.132",
        "Checkov by Prisma Cloud 3.2.133",
        "Checkov by Prisma Cloud 3.2.134",
        "Checkov by Prisma Cloud 3.2.135",
        "Checkov by Prisma Cloud 3.2.136",
        "Checkov by Prisma Cloud 3.2.137",
        "Checkov by Prisma Cloud 3.2.138",
        "Checkov by Prisma Cloud 3.2.139",
        "Checkov by Prisma Cloud 3.2.140",
        "Checkov by Prisma Cloud 3.2.141",
        "Checkov by Prisma Cloud 3.2.142",
        "Checkov by Prisma Cloud 3.2.143",
        "Checkov by Prisma Cloud 3.2.144",
        "Checkov by Prisma Cloud 3.2.145",
        "Checkov by Prisma Cloud 3.2.146",
        "Checkov by Prisma Cloud 3.2.147",
        "Checkov by Prisma Cloud 3.2.148",
        "Checkov by Prisma Cloud 3.2.149",
        "Checkov by Prisma Cloud 3.2.150",
        "Checkov by Prisma Cloud 3.2.151",
        "Checkov by Prisma Cloud 3.2.152",
        "Checkov by Prisma Cloud 3.2.153",
        "Checkov by Prisma Cloud 3.2.154",
        "Checkov by Prisma Cloud 3.2.155",
        "Checkov by Prisma Cloud 3.2.156",
        "Checkov by Prisma Cloud 3.2.157",
        "Checkov by Prisma Cloud 3.2.158",
        "Checkov by Prisma Cloud 3.2.159",
        "Checkov by Prisma Cloud 3.2.160",
        "Checkov by Prisma Cloud 3.2.161",
        "Checkov by Prisma Cloud 3.2.162",
        "Checkov by Prisma Cloud 3.2.163",
        "Checkov by Prisma Cloud 3.2.164",
        "Checkov by Prisma Cloud 3.2.165",
        "Checkov by Prisma Cloud 3.2.166",
        "Checkov by Prisma Cloud 3.2.167",
        "Checkov by Prisma Cloud 3.2.168",
        "Checkov by Prisma Cloud 3.2.169",
        "Checkov by Prisma Cloud 3.2.170",
        "Checkov by Prisma Cloud 3.2.171",
        "Checkov by Prisma Cloud 3.2.172",
        "Checkov by Prisma Cloud 3.2.173",
        "Checkov by Prisma Cloud 3.2.174",
        "Checkov by Prisma Cloud 3.2.175",
        "Checkov by Prisma Cloud 3.2.176",
        "Checkov by Prisma Cloud 3.2.177",
        "Checkov by Prisma Cloud 3.2.178",
        "Checkov by Prisma Cloud 3.2.179",
        "Checkov by Prisma Cloud 3.2.180",
        "Checkov by Prisma Cloud 3.2.181",
        "Checkov by Prisma Cloud 3.2.182",
        "Checkov by Prisma Cloud 3.2.183",
        "Checkov by Prisma Cloud 3.2.184",
        "Checkov by Prisma Cloud 3.2.185",
        "Checkov by Prisma Cloud 3.2.186",
        "Checkov by Prisma Cloud 3.2.187",
        "Checkov by Prisma Cloud 3.2.188",
        "Checkov by Prisma Cloud 3.2.189",
        "Checkov by Prisma Cloud 3.2.190",
        "Checkov by Prisma Cloud 3.2.191",
        "Checkov by Prisma Cloud 3.2.192",
        "Checkov by Prisma Cloud 3.2.193",
        "Checkov by Prisma Cloud 3.2.194",
        "Checkov by Prisma Cloud 3.2.195",
        "Checkov by Prisma Cloud 3.2.196",
        "Checkov by Prisma Cloud 3.2.197",
        "Checkov by Prisma Cloud 3.2.198",
        "Checkov by Prisma Cloud 3.2.199",
        "Checkov by Prisma Cloud 3.2.200",
        "Checkov by Prisma Cloud 3.2.201",
        "Checkov by Prisma Cloud 3.2.202",
        "Checkov by Prisma Cloud 3.2.203",
        "Checkov by Prisma Cloud 3.2.204",
        "Checkov by Prisma Cloud 3.2.205",
        "Checkov by Prisma Cloud 3.2.206",
        "Checkov by Prisma Cloud 3.2.207",
        "Checkov by Prisma Cloud 3.2.208",
        "Checkov by Prisma Cloud 3.2.209",
        "Checkov by Prisma Cloud 3.2.210",
        "Checkov by Prisma Cloud 3.2.211",
        "Checkov by Prisma Cloud 3.2.212",
        "Checkov by Prisma Cloud 3.2.213",
        "Checkov by Prisma Cloud 3.2.214",
        "Checkov by Prisma Cloud 3.2.215",
        "Checkov by Prisma Cloud 3.2.216",
        "Checkov by Prisma Cloud 3.2.217",
        "Checkov by Prisma Cloud 3.2.218",
        "Checkov by Prisma Cloud 3.2.219",
        "Checkov by Prisma Cloud 3.2.220",
        "Checkov by Prisma Cloud 3.2.221",
        "Checkov by Prisma Cloud 3.2.222",
        "Checkov by Prisma Cloud 3.2.223",
        "Checkov by Prisma Cloud 3.2.224",
        "Checkov by Prisma Cloud 3.2.225",
        "Checkov by Prisma Cloud 3.2.226",
        "Checkov by Prisma Cloud 3.2.227",
        "Checkov by Prisma Cloud 3.2.228",
        "Checkov by Prisma Cloud 3.2.229",
        "Checkov by Prisma Cloud 3.2.230",
        "Checkov by Prisma Cloud 3.2.231",
        "Checkov by Prisma Cloud 3.2.232",
        "Checkov by Prisma Cloud 3.2.233",
        "Checkov by Prisma Cloud 3.2.234",
        "Checkov by Prisma Cloud 3.2.235",
        "Checkov by Prisma Cloud 3.2.236",
        "Checkov by Prisma Cloud 3.2.237",
        "Checkov by Prisma Cloud 3.2.238",
        "Checkov by Prisma Cloud 3.2.239",
        "Checkov by Prisma Cloud 3.2.240",
        "Checkov by Prisma Cloud 3.2.241",
        "Checkov by Prisma Cloud 3.2.242",
        "Checkov by Prisma Cloud 3.2.243",
        "Checkov by Prisma Cloud 3.2.244",
        "Checkov by Prisma Cloud 3.2.245",
        "Checkov by Prisma Cloud 3.2.246",
        "Checkov by Prisma Cloud 3.2.247",
        "Checkov by Prisma Cloud 3.2.248",
        "Checkov by Prisma Cloud 3.2.249",
        "Checkov by Prisma Cloud 3.2.250",
        "Checkov by Prisma Cloud 3.2.251",
        "Checkov by Prisma Cloud 3.2.252",
        "Checkov by Prisma Cloud 3.2.253",
        "Checkov by Prisma Cloud 3.2.254",
        "Checkov by Prisma Cloud 3.2.255",
        "Checkov by Prisma Cloud 3.2.256",
        "Checkov by Prisma Cloud 3.2.257",
        "Checkov by Prisma Cloud 3.2.258",
        "Checkov by Prisma Cloud 3.2.259",
        "Checkov by Prisma Cloud 3.2.260",
        "Checkov by Prisma Cloud 3.2.261",
        "Checkov by Prisma Cloud 3.2.262",
        "Checkov by Prisma Cloud 3.2.263",
        "Checkov by Prisma Cloud 3.2.264",
        "Checkov by Prisma Cloud 3.2.265",
        "Checkov by Prisma Cloud 3.2.266",
        "Checkov by Prisma Cloud 3.2.267",
        "Checkov by Prisma Cloud 3.2.268",
        "Checkov by Prisma Cloud 3.2.269",
        "Checkov by Prisma Cloud 3.2.270",
        "Checkov by Prisma Cloud 3.2.271",
        "Checkov by Prisma Cloud 3.2.272",
        "Checkov by Prisma Cloud 3.2.273",
        "Checkov by Prisma Cloud 3.2.274",
        "Checkov by Prisma Cloud 3.2.275",
        "Checkov by Prisma Cloud 3.2.276",
        "Checkov by Prisma Cloud 3.2.277",
        "Checkov by Prisma Cloud 3.2.278",
        "Checkov by Prisma Cloud 3.2.279",
        "Checkov by Prisma Cloud 3.2.280",
        "Checkov by Prisma Cloud 3.2.281",
        "Checkov by Prisma Cloud 3.2.282",
        "Checkov by Prisma Cloud 3.2.283",
        "Checkov by Prisma Cloud 3.2.284",
        "Checkov by Prisma Cloud 3.2.285",
        "Checkov by Prisma Cloud 3.2.286",
        "Checkov by Prisma Cloud 3.2.287",
        "Checkov by Prisma Cloud 3.2.288",
        "Checkov by Prisma Cloud 3.2.289",
        "Checkov by Prisma Cloud 3.2.290",
        "Checkov by Prisma Cloud 3.2.291",
        "Checkov by Prisma Cloud 3.2.292",
        "Checkov by Prisma Cloud 3.2.293",
        "Checkov by Prisma Cloud 3.2.294",
        "Checkov by Prisma Cloud 3.2.295",
        "Checkov by Prisma Cloud 3.2.296",
        "Checkov by Prisma Cloud 3.2.297",
        "Checkov by Prisma Cloud 3.2.298",
        "Checkov by Prisma Cloud 3.2.299",
        "Checkov by Prisma Cloud 3.2.300",
        "Checkov by Prisma Cloud 3.2.301",
        "Checkov by Prisma Cloud 3.2.302",
        "Checkov by Prisma Cloud 3.2.303",
        "Checkov by Prisma Cloud 3.2.304",
        "Checkov by Prisma Cloud 3.2.305",
        "Checkov by Prisma Cloud 3.2.306",
        "Checkov by Prisma Cloud 3.2.307",
        "Checkov by Prisma Cloud 3.2.308",
        "Checkov by Prisma Cloud 3.2.309",
        "Checkov by Prisma Cloud 3.2.310",
        "Checkov by Prisma Cloud 3.2.311",
        "Checkov by Prisma Cloud 3.2.312",
        "Checkov by Prisma Cloud 3.2.313",
        "Checkov by Prisma Cloud 3.2.314",
        "Checkov by Prisma Cloud 3.2.315",
        "Checkov by Prisma Cloud 3.2.316",
        "Checkov by Prisma Cloud 3.2.317",
        "Checkov by Prisma Cloud 3.2.318",
        "Checkov by Prisma Cloud 3.2.319",
        "Checkov by Prisma Cloud 3.2.320",
        "Checkov by Prisma Cloud 3.2.321",
        "Checkov by Prisma Cloud 3.2.322",
        "Checkov by Prisma Cloud 3.2.323",
        "Checkov by Prisma Cloud 3.2.324",
        "Checkov by Prisma Cloud 3.2.325",
        "Checkov by Prisma Cloud 3.2.326",
        "Checkov by Prisma Cloud 3.2.327",
        "Checkov by Prisma Cloud 3.2.328",
        "Checkov by Prisma Cloud 3.2.329",
        "Checkov by Prisma Cloud 3.2.330",
        "Checkov by Prisma Cloud 3.2.331",
        "Checkov by Prisma Cloud 3.2.332",
        "Checkov by Prisma Cloud 3.2.333",
        "Checkov by Prisma Cloud 3.2.334",
        "Checkov by Prisma Cloud 3.2.335",
        "Checkov by Prisma Cloud 3.2.336",
        "Checkov by Prisma Cloud 3.2.337",
        "Checkov by Prisma Cloud 3.2.338",
        "Checkov by Prisma Cloud 3.2.339",
        "Checkov by Prisma Cloud 3.2.340",
        "Checkov by Prisma Cloud 3.2.341",
        "Checkov by Prisma Cloud 3.2.342",
        "Checkov by Prisma Cloud 3.2.343",
        "Checkov by Prisma Cloud 3.2.344",
        "Checkov by Prisma Cloud 3.2.345",
        "Checkov by Prisma Cloud 3.2.346",
        "Checkov by Prisma Cloud 3.2.347",
        "Checkov by Prisma Cloud 3.2.348",
        "Checkov by Prisma Cloud 3.2.349",
        "Checkov by Prisma Cloud 3.2.350",
        "Checkov by Prisma Cloud 3.2.351",
        "Checkov by Prisma Cloud 3.2.352",
        "Checkov by Prisma Cloud 3.2.353",
        "Checkov by Prisma Cloud 3.2.354",
        "Checkov by Prisma Cloud 3.2.355",
        "Checkov by Prisma Cloud 3.2.356",
        "Checkov by Prisma Cloud 3.2.357",
        "Checkov by Prisma Cloud 3.2.358",
        "Checkov by Prisma Cloud 3.2.359",
        "Checkov by Prisma Cloud 3.2.360",
        "Checkov by Prisma Cloud 3.2.361",
        "Checkov by Prisma Cloud 3.2.362",
        "Checkov by Prisma Cloud 3.2.363",
        "Checkov by Prisma Cloud 3.2.364",
        "Checkov by Prisma Cloud 3.2.365",
        "Checkov by Prisma Cloud 3.2.366",
        "Checkov by Prisma Cloud 3.2.367",
        "Checkov by Prisma Cloud 3.2.368",
        "Checkov by Prisma Cloud 3.2.369",
        "Checkov by Prisma Cloud 3.2.370",
        "Checkov by Prisma Cloud 3.2.371",
        "Checkov by Prisma Cloud 3.2.372",
        "Checkov by Prisma Cloud 3.2.373",
        "Checkov by Prisma Cloud 3.2.374",
        "Checkov by Prisma Cloud 3.2.375",
        "Checkov by Prisma Cloud 3.2.376",
        "Checkov by Prisma Cloud 3.2.377",
        "Checkov by Prisma Cloud 3.2.378",
        "Checkov by Prisma Cloud 3.2.379",
        "Checkov by Prisma Cloud 3.2.380",
        "Checkov by Prisma Cloud 3.2.381",
        "Checkov by Prisma Cloud 3.2.382",
        "Checkov by Prisma Cloud 3.2.383",
        "Checkov by Prisma Cloud 3.2.384",
        "Checkov by Prisma Cloud 3.2.385",
        "Checkov by Prisma Cloud 3.2.386",
        "Checkov by Prisma Cloud 3.2.387",
        "Checkov by Prisma Cloud 3.2.388",
        "Checkov by Prisma Cloud 3.2.389",
        "Checkov by Prisma Cloud 3.2.390",
        "Checkov by Prisma Cloud 3.2.391",
        "Checkov by Prisma Cloud 3.2.392",
        "Checkov by Prisma Cloud 3.2.393",
        "Checkov by Prisma Cloud 3.2.394",
        "Checkov by Prisma Cloud 3.2.395",
        "Checkov by Prisma Cloud 3.2.396",
        "Checkov by Prisma Cloud 3.2.397",
        "Checkov by Prisma Cloud 3.2.398",
        "Checkov by Prisma Cloud 3.2.399",
        "Checkov by Prisma Cloud 3.2.400",
        "Checkov by Prisma Cloud 3.2.401",
        "Checkov by Prisma Cloud 3.2.402",
        "Checkov by Prisma Cloud 3.2.403",
        "Checkov by Prisma Cloud 3.2.404",
        "Checkov by Prisma Cloud 3.2.405",
        "Checkov by Prisma Cloud 3.2.406",
        "Checkov by Prisma Cloud 3.2.407",
        "Checkov by Prisma Cloud 3.2.408",
        "Checkov by Prisma Cloud 3.2.409",
        "Checkov by Prisma Cloud 3.2.410",
        "Checkov by Prisma Cloud 3.2.411",
        "Checkov by Prisma Cloud 3.2.412",
        "Checkov by Prisma Cloud 3.2.413",
        "Checkov by Prisma Cloud 3.2.414",
        "Checkov by Prisma Cloud 3.2.415",
        "Checkov by Prisma Cloud 3.2.416",
        "Checkov by Prisma Cloud 3.2.417",
        "Checkov by Prisma Cloud 3.2.418",
        "Checkov by Prisma Cloud 3.2.419",
        "Checkov by Prisma Cloud 3.2.420",
        "Checkov by Prisma Cloud 3.2.421",
        "Checkov by Prisma Cloud 3.2.422",
        "Checkov by Prisma Cloud 3.2.423",
        "Checkov by Prisma Cloud 3.2.424",
        "Checkov by Prisma Cloud 3.2.425",
        "Checkov by Prisma Cloud 3.2.426",
        "Checkov by Prisma Cloud 3.2.427",
        "Checkov by Prisma Cloud 3.2.428",
        "Checkov by Prisma Cloud 3.2.429",
        "Checkov by Prisma Cloud 3.2.430",
        "Checkov by Prisma Cloud 3.2.431",
        "Checkov by Prisma Cloud 3.2.432",
        "Checkov by Prisma Cloud 3.2.433",
        "Checkov by Prisma Cloud 3.2.434",
        "Checkov by Prisma Cloud 3.2.435",
        "Checkov by Prisma Cloud 3.2.436",
        "Checkov by Prisma Cloud 3.2.437",
        "Checkov by Prisma Cloud 3.2.438",
        "Checkov by Prisma Cloud 3.2.439",
        "Checkov by Prisma Cloud 3.2.440",
        "Checkov by Prisma Cloud 3.2.441",
        "Checkov by Prisma Cloud 3.2.442",
        "Checkov by Prisma Cloud 3.2.443",
        "Checkov by Prisma Cloud 3.2.444",
        "Checkov by Prisma Cloud 3.2.445",
        "Checkov by Prisma Cloud 3.2.446",
        "Checkov by Prisma Cloud 3.2.447",
        "Checkov by Prisma Cloud 3.2.448",
        "Checkov by Prisma Cloud 3.2.449",
        "Checkov by Prisma Cloud 3.2.450",
        "Checkov by Prisma Cloud 3.2.451",
        "Checkov by Prisma Cloud 3.2.452",
        "Checkov by Prisma Cloud 3.2.453",
        "Checkov by Prisma Cloud 3.2.454",
        "Checkov by Prisma Cloud 3.2.455",
        "Checkov by Prisma Cloud 3.2.456",
        "Checkov by Prisma Cloud 3.2.457",
        "Checkov by Prisma Cloud 3.2.458",
        "Checkov by Prisma Cloud 3.2.459",
        "Checkov by Prisma Cloud 3.2.460",
        "Checkov by Prisma Cloud 3.2.461",
        "Checkov by Prisma Cloud 3.2.462",
        "Checkov by Prisma Cloud 3.2.463",
        "Checkov by Prisma Cloud 3.2.464",
        "Checkov by Prisma Cloud 3.2.465",
        "Checkov by Prisma Cloud 3.2.466",
        "Checkov by Prisma Cloud 3.2.467",
        "Checkov by Prisma Cloud 3.2.468",
        "Checkov by Prisma Cloud 3.2.469",
        "Checkov by Prisma Cloud 3.2.470",
        "Checkov by Prisma Cloud 3.2.471",
        "Checkov by Prisma Cloud 3.2.472",
        "Checkov by Prisma Cloud 3.2.473",
        "Checkov by Prisma Cloud 3.2.474",
        "Checkov by Prisma Cloud 3.2.475",
        "Checkov by Prisma Cloud 3.2.476",
        "Checkov by Prisma Cloud 3.2.477",
        "Checkov by Prisma Cloud 3.2.478",
        "Checkov by Prisma Cloud 3.2.479",
        "Checkov by Prisma Cloud 3.2.480",
        "Checkov by Prisma Cloud 3.2.481",
        "Checkov by Prisma Cloud 3.2.482",
        "Checkov by Prisma Cloud 3.2.483",
        "Checkov by Prisma Cloud 3.2.484",
        "Checkov by Prisma Cloud 3.2.485",
        "Checkov by Prisma Cloud 3.2.486",
        "Checkov by Prisma Cloud 3.2.487",
        "Checkov by Prisma Cloud 3.2.488",
        "Checkov by Prisma Cloud 3.2.489",
        "Checkov by Prisma Cloud 3.2.490",
        "Checkov by Prisma Cloud 3.2.491",
        "Checkov by Prisma Cloud 3.2.492",
        "Checkov by Prisma Cloud 3.2.493",
        "Checkov by Prisma Cloud 3.2.494",
        "Checkov by Prisma Cloud 3.2.495",
        "Checkov by Prisma Cloud 3.2.496",
        "Checkov by Prisma Cloud 3.2.497",
        "Checkov by Prisma Cloud 3.2.498",
        "Checkov by Prisma Cloud 3.2.499",
        "Checkov by Prisma Cloud 3.2.500",
        "Checkov by Prisma Cloud 3.2.501",
        "Checkov by Prisma Cloud 3.2.502",
        "Checkov by Prisma Cloud 3.2.503",
        "Checkov by Prisma Cloud 3.2.504",
        "Checkov by Prisma Cloud 3.2.505",
        "Checkov by Prisma Cloud 3.2.506",
        "Checkov by Prisma Cloud 3.2.507",
        "Checkov by Prisma Cloud 3.2.508",
        "Checkov by Prisma Cloud 3.2.509",
        "Checkov by Prisma Cloud 3.2.510",
        "Checkov by Prisma Cloud 3.2.511",
        "Checkov by Prisma Cloud 3.2.512",
        "Checkov by Prisma Cloud 3.2.513",
        "Checkov by Prisma Cloud 3.2.514",
        "Checkov by Prisma Cloud 3.2.515",
        "Checkov by Prisma Cloud 3.2.516",
        "Checkov by Prisma Cloud 3.2.517",
        "Checkov by Prisma Cloud 3.2.518",
        "Checkov by Prisma Cloud 3.2.519",
        "Checkov by Prisma Cloud 3.2.520",
        "Checkov by Prisma Cloud 3.2.521",
        "Checkov by Prisma Cloud 3.2.522",
        "Checkov by Prisma Cloud 3.2.523",
        "Checkov by Prisma Cloud 3.2.524",
        "Checkov by Prisma Cloud 3.2.525",
        "Checkov by Prisma Cloud 3.2.526",
        "Checkov by Prisma Cloud 3.2.527",
        "Checkov by Prisma Cloud 3.2.528",
        "Checkov by Prisma Cloud 3.2.529",
        "Checkov by Prisma Cloud 3.2.530",
        "Checkov by Prisma Cloud 3.2.531",
        "Checkov by Prisma Cloud 3.2.532"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0311",
    "datePublished": "2026-10-14T20:29:19.297Z",
    "dateReserved": "2025-11-03T20:45:09.854Z",
    "dateUpdated": "2026-10-15T16:43:45.351Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-0321 (GCVE-0-2026-0321)

    Vulnerability from nvd – Published: 2026-10-14 19:58 – Updated: 2026-10-15 19:31
    VLAI
    Title
    PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services
    Summary
    Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Repeated attempts to trigger this condition result in the firewall entering maintenance mode. Cloud NGFW and Panorama are not affected by this vulnerability.
    Severity
    6.6 (Medium)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-15 19:31 UTC
    CWE
    • CWE-754 - Improper Check for Unusual or Exceptional Conditions
    Assigner
    palo_alto CNA under the mitre root
    CNA scorecard A 95/100 over 96 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Palo Alto Networks Cloud NGFW Unaffected: All (custom)
    		Create a notification for this product.
    Palo Alto Networks PAN-OS Affected: 12.2.0 , < 12.2.4 (custom)
    Affected: 12.1.0 , < 12.1.10-h2 (custom)
    Affected: 11.2.0 , < 11.2.16 (custom)
    Affected: 11.1.0 , < 11.1.16-h3 (custom)
    Affected: 10.2.0 , < 10.2.18-h12 (custom)
        cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h33:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h32:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h30:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h28:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h27:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h26:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h25:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h38:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h36:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h35:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h34:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h33:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h32:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h36:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h35:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h34:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h33:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h25:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h24:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h23:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h22:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h40:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h39:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h37:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h36:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h37:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h36:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h35:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h34:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h32:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h24:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h23:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h22:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h20:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h19:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h16:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*
    		Create a notification for this product.
    Palo Alto Networks Prisma Access Affected: 12.1.0 , < 12.1.7-h8 (custom)
    Affected: 11.2.0 , < 11.2.7-h21 (custom)
    Affected: 10.2.0 , < 10.2.10-h41 (custom)
        cpe:2.3:a:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:*
        cpe:2.3:a:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:*
        cpe:2.3:a:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Date Public
    2026-10-14 16:00
    Credits
    Ben Nott (internal reporter)
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0321",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T19:31:07.239763Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T19:31:16.341Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Cloud NGFW",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h33:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h32:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h30:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h28:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h27:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h26:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h25:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h38:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h35:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h34:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h33:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h32:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h35:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h34:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h33:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h25:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h24:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h22:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h40:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h39:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h37:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h37:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h35:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h34:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h32:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h24:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h22:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h20:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h19:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h16:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "PAN-OS",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.2.4",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.2.4",
              "status": "affected",
              "version": "12.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "12.1.10-h2",
                  "status": "unaffected"
                },
                {
                  "at": "12.1.7-h8",
                  "status": "unaffected"
                },
                {
                  "at": "12.1.4-h12",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.1.10-h2",
              "status": "affected",
              "version": "12.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.2.16",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.13-h3",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.10-h15",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.7-h21",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.4-h22",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.2.16",
              "status": "affected",
              "version": "11.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.1.16-h3",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.13-h15",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.10-h35",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.7-h11",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.6-h39",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.4-h37",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.1.16-h3",
              "status": "affected",
              "version": "11.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "10.2.18-h12",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.16-h11",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.13-h26",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.10-h41",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.7-h38",
                  "status": "unaffected"
                }
              ],
              "lessThan": "10.2.18-h12",
              "status": "affected",
              "version": "10.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Prisma Access",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.1.7-h8",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.1.7-h8",
              "status": "affected",
              "version": "12.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.2.7-h21",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.2.7-h21",
              "status": "affected",
              "version": "11.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "10.2.10-h41",
                  "status": "unaffected"
                }
              ],
              "lessThan": "10.2.10-h41",
              "status": "affected",
              "version": "10.2.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:cloud_ngfw:all:*:*:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.2.4",
                  "versionStartIncluding": "12.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.1.10-h2",
                  "versionStartIncluding": "12.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.2.16",
                  "versionStartIncluding": "11.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.1.16-h3",
                  "versionStartIncluding": "11.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.2.18-h12",
                  "versionStartIncluding": "10.2.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.1.7-h8",
                  "versionStartIncluding": "12.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.2.7-h21",
                  "versionStartIncluding": "11.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.2.10-h41",
                  "versionStartIncluding": "10.2.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Ben Nott (internal reporter)"
        }
      ],
      "datePublic": "2026-10-14T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003c/p\u003e\u003cp\u003e\u003cspan\u003eDenial of service vulnerabilities in Palo Alto Networks PAN-OS\u00ae software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Repeated attempts to trigger this condition result in the firewall entering maintenance mode.\u003c/span\u003e\u003c/p\u003e\u003cp\u003e\u003cspan\u003e\u003cspan\u003eCloud NGFW and Panorama are not affected by this vulnerability.\u003c/span\u003e\u003c/span\u003e\u003c/p\u003e \u003cp\u003e\u003c/p\u003e"
            }
          ],
          "value": "Denial of service vulnerabilities in Palo Alto Networks PAN-OS\u00ae software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Repeated attempts to trigger this condition result in the firewall entering maintenance mode.\n\n\n\nCloud NGFW and Panorama are not affected by this vulnerability."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-153",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-153 Input Data Manipulation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 6.6,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-754",
              "description": "CWE-754 Improper Check for Unusual or Exceptional Conditions",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T19:58:55.823Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0321"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 12.2\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.2.0 through 12.2.3 \u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.2.4 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 12.1\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.1.8 through 12.1.10-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.1.10-h2 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.1.5 through 12.1.7-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.1.7-h8 or 12.1.10-h2 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.1.2 through 12.1.4-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.1.4-h12 or 12.1.10-h2 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 11.2\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.14 through\u0026nbsp;11.2.15-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.11 through 11.2.13-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.13-h3 or 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.8 through 11.2.10-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.10-h15 or 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.5 through 11.2.7-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.7-h21 or 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.0 through 11.2.4-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.4-h22 or 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 11.1\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.14 through 11.1.16-h* \u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.11 through 11.1.13-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.13-h15 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.8 through 11.1.10-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.10-h35 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.7 through 11.1.7-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.7-h11 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.5 through 11.1.6-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.6-h39 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.0 through 11.1.4-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.4-h37 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 10.2\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.17 through 10.2.18-h* \u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.14 through 10.2.16-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.16-h11 or 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.11 through 10.2.13-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.13-h26 or 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.8 through 10.2.10-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.10-h41 or 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.0 through 10.2.7-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.7-h38 or 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003ePrisma Access needs to be upgraded in accordance with product status table.\u0026nbsp;"
            }
          ],
          "value": "Version\nMinor Version\nSuggested Solution\n\n                                PAN-OS 12.2\n\n                                12.2.0 through 12.2.3 \n                                Upgrade to 12.2.4 or later.\n                            \n                                PAN-OS 12.1\n\n                                12.1.8 through 12.1.10-h*\n                                Upgrade to 12.1.10-h2 or later.\n                            \n                                \n                                12.1.5 through 12.1.7-h*\n                                Upgrade to 12.1.7-h8 or 12.1.10-h2 or later.\n                            \n                                \n                                12.1.2 through 12.1.4-h*\n                                Upgrade to 12.1.4-h12 or 12.1.10-h2 or later.\n                            \n                                PAN-OS 11.2\n\n                                11.2.14 through\u00a011.2.15-h*\n                                Upgrade to 11.2.16 or later.\n                            \n                                \n                                11.2.11 through 11.2.13-h*\n                                Upgrade to 11.2.13-h3 or 11.2.16 or later.\n                            \n                                \n                                11.2.8 through 11.2.10-h*\n                                Upgrade to 11.2.10-h15 or 11.2.16 or later.\n                            \n                                \n                                11.2.5 through 11.2.7-h*\n                                Upgrade to 11.2.7-h21 or 11.2.16 or later.\n                            \n                                \n                                11.2.0 through 11.2.4-h*\n                                Upgrade to 11.2.4-h22 or 11.2.16 or later.\n                            \n                                PAN-OS 11.1\n\n                                11.1.14 through 11.1.16-h* \n                                Upgrade to 11.1.16-h3 or later.\n                            \n                                \n                                11.1.11 through 11.1.13-h*\n                                Upgrade to 11.1.13-h15 or 11.1.16-h3 or later.\n                            \n                                \n                                11.1.8 through 11.1.10-h*\n                                Upgrade to 11.1.10-h35 or 11.1.16-h3 or later.\n                            \n                                \n                                11.1.7 through 11.1.7-h*\n                                Upgrade to 11.1.7-h11 or 11.1.16-h3 or later.\n                            \n                                \n                                11.1.5 through 11.1.6-h*\n                                Upgrade to 11.1.6-h39 or 11.1.16-h3 or later.\n                            \n                                \n                                11.1.0 through 11.1.4-h*\n                                Upgrade to 11.1.4-h37 or 11.1.16-h3 or later.\n                            \n                                PAN-OS 10.2\n\n                                10.2.17 through 10.2.18-h* \n                                Upgrade to 10.2.18-h12 or later.\n                            \n                                \n                                10.2.14 through 10.2.16-h*\n                                Upgrade to 10.2.16-h11 or 10.2.18-h12 or later.\n                            \n                                \n                                10.2.11 through 10.2.13-h*\n                                Upgrade to 10.2.13-h26 or 10.2.18-h12 or later.\n                            \n                                \n                                10.2.8 through 10.2.10-h*\n                                Upgrade to 10.2.10-h41 or 10.2.18-h12 or later.\n                            \n                                \n                                10.2.0 through 10.2.7-h*\n                                Upgrade to 10.2.7-h38 or 10.2.18-h12 or later.\n                            Prisma Access needs to be upgraded in accordance with product status table."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-14T16:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No known workarounds exist for this issue.\u003cbr\u003e\u003cbr\u003eCustomers with a Threat Prevention subscription are provided with limited coverage against this vulnerability by enabling Threat ID 510038 (from Applications and Threats content version \u003cspan\u003e9158-10284\u003c/span\u003e and later). Please note that this Threat ID requires SSL Decryption."
            }
          ],
          "value": "No known workarounds exist for this issue.\n\nCustomers with a Threat Prevention subscription are provided with limited coverage against this vulnerability by enabling Threat ID 510038 (from Applications and Threats content version 9158-10284 and later). Please note that this Threat ID requires SSL Decryption."
        }
      ],
      "x_affectedList": [
        "PAN-OS 12.2.3",
        "PAN-OS 12.2.2",
        "PAN-OS 12.1.10",
        "PAN-OS 12.1.9",
        "PAN-OS 12.1.8",
        "PAN-OS 12.1.7-h6",
        "PAN-OS 12.1.7-h5",
        "PAN-OS 12.1.7-h3",
        "PAN-OS 12.1.7-h2",
        "PAN-OS 12.1.7-h1",
        "PAN-OS 12.1.7",
        "PAN-OS 12.1.6",
        "PAN-OS 12.1.5",
        "PAN-OS 12.1.4-h11",
        "PAN-OS 12.1.4-h10",
        "PAN-OS 12.1.4-h9",
        "PAN-OS 12.1.4-h8",
        "PAN-OS 12.1.4-h7",
        "PAN-OS 12.1.4-h6",
        "PAN-OS 12.1.4-h5",
        "PAN-OS 12.1.4-h3",
        "PAN-OS 12.1.4-h2",
        "PAN-OS 12.1.4",
        "PAN-OS 12.1.3-h3",
        "PAN-OS 12.1.3-h1",
        "PAN-OS 12.1.3",
        "PAN-OS 12.1.2",
        "PAN-OS 11.2.15",
        "PAN-OS 11.2.13-h2",
        "PAN-OS 11.2.13-h1",
        "PAN-OS 11.2.13",
        "PAN-OS 11.2.12",
        "PAN-OS 11.2.11",
        "PAN-OS 11.2.10-h14",
        "PAN-OS 11.2.10-h13",
        "PAN-OS 11.2.10-h12",
        "PAN-OS 11.2.10-h10",
        "PAN-OS 11.2.10-h9",
        "PAN-OS 11.2.10-h8",
        "PAN-OS 11.2.10-h7",
        "PAN-OS 11.2.10-h6",
        "PAN-OS 11.2.10-h5",
        "PAN-OS 11.2.10-h4",
        "PAN-OS 11.2.10-h3",
        "PAN-OS 11.2.10-h2",
        "PAN-OS 11.2.10-h1",
        "PAN-OS 11.2.10",
        "PAN-OS 11.2.9",
        "PAN-OS 11.2.8",
        "PAN-OS 11.2.7-h20",
        "PAN-OS 11.2.7-h19",
        "PAN-OS 11.2.7-h18",
        "PAN-OS 11.2.7-h17",
        "PAN-OS 11.2.7-h16",
        "PAN-OS 11.2.7-h15",
        "PAN-OS 11.2.7-h14",
        "PAN-OS 11.2.7-h13",
        "PAN-OS 11.2.7-h12",
        "PAN-OS 11.2.7-h11",
        "PAN-OS 11.2.7-h10",
        "PAN-OS 11.2.7-h8",
        "PAN-OS 11.2.7-h7",
        "PAN-OS 11.2.7-h4",
        "PAN-OS 11.2.7-h3",
        "PAN-OS 11.2.7-h2",
        "PAN-OS 11.2.7-h1",
        "PAN-OS 11.2.7",
        "PAN-OS 11.2.6",
        "PAN-OS 11.2.5",
        "PAN-OS 11.2.4-h21",
        "PAN-OS 11.2.4-h20",
        "PAN-OS 11.2.4-h18",
        "PAN-OS 11.2.4-h17",
        "PAN-OS 11.2.4-h15",
        "PAN-OS 11.2.4-h14",
        "PAN-OS 11.2.4-h12",
        "PAN-OS 11.2.4-h11",
        "PAN-OS 11.2.4-h10",
        "PAN-OS 11.2.4-h9",
        "PAN-OS 11.2.4-h8",
        "PAN-OS 11.2.4-h7",
        "PAN-OS 11.2.4-h6",
        "PAN-OS 11.2.4-h5",
        "PAN-OS 11.2.4-h4",
        "PAN-OS 11.2.4-h3",
        "PAN-OS 11.2.4-h2",
        "PAN-OS 11.2.4-h1",
        "PAN-OS 11.2.4",
        "PAN-OS 11.2.3-h5",
        "PAN-OS 11.2.3-h4",
        "PAN-OS 11.2.3-h3",
        "PAN-OS 11.2.3-h2",
        "PAN-OS 11.2.3-h1",
        "PAN-OS 11.2.3",
        "PAN-OS 11.2.2-h2",
        "PAN-OS 11.2.2-h1",
        "PAN-OS 11.2.1-h1",
        "PAN-OS 11.2.1",
        "PAN-OS 11.2.0-h1",
        "PAN-OS 11.2.0",
        "PAN-OS 11.1.16-h2",
        "PAN-OS 11.1.16-h1",
        "PAN-OS 11.1.16",
        "PAN-OS 11.1.15",
        "PAN-OS 11.1.14",
        "PAN-OS 11.1.13-h12",
        "PAN-OS 11.1.13-h11",
        "PAN-OS 11.1.13-h10",
        "PAN-OS 11.1.13-h9",
        "PAN-OS 11.1.13-h8",
        "PAN-OS 11.1.13-h7",
        "PAN-OS 11.1.13-h6",
        "PAN-OS 11.1.13-h5",
        "PAN-OS 11.1.13-h3",
        "PAN-OS 11.1.13-h2",
        "PAN-OS 11.1.13-h1",
        "PAN-OS 11.1.13",
        "PAN-OS 11.1.12",
        "PAN-OS 11.1.11",
        "PAN-OS 11.1.10-h33",
        "PAN-OS 11.1.10-h32",
        "PAN-OS 11.1.10-h30",
        "PAN-OS 11.1.10-h28",
        "PAN-OS 11.1.10-h27",
        "PAN-OS 11.1.10-h26",
        "PAN-OS 11.1.10-h25",
        "PAN-OS 11.1.10-h21",
        "PAN-OS 11.1.10-h12",
        "PAN-OS 11.1.10-h10",
        "PAN-OS 11.1.10-h9",
        "PAN-OS 11.1.10-h7",
        "PAN-OS 11.1.10-h5",
        "PAN-OS 11.1.10-h4",
        "PAN-OS 11.1.10-h1",
        "PAN-OS 11.1.10",
        "PAN-OS 11.1.9",
        "PAN-OS 11.1.8",
        "PAN-OS 11.1.6-h38",
        "PAN-OS 11.1.6-h36",
        "PAN-OS 11.1.6-h35",
        "PAN-OS 11.1.6-h34",
        "PAN-OS 11.1.6-h33",
        "PAN-OS 11.1.6-h32",
        "PAN-OS 11.1.6-h29",
        "PAN-OS 11.1.6-h25",
        "PAN-OS 11.1.6-h23",
        "PAN-OS 11.1.6-h22",
        "PAN-OS 11.1.6-h21",
        "PAN-OS 11.1.6-h20",
        "PAN-OS 11.1.6-h19",
        "PAN-OS 11.1.6-h18",
        "PAN-OS 11.1.6-h17",
        "PAN-OS 11.1.6-h14",
        "PAN-OS 11.1.6-h10",
        "PAN-OS 11.1.6-h7",
        "PAN-OS 11.1.6-h6",
        "PAN-OS 11.1.6-h4",
        "PAN-OS 11.1.6-h3",
        "PAN-OS 11.1.6-h2",
        "PAN-OS 11.1.6-h1",
        "PAN-OS 11.1.6",
        "PAN-OS 11.1.5-h1",
        "PAN-OS 11.1.5",
        "PAN-OS 11.1.4-h36",
        "PAN-OS 11.1.4-h35",
        "PAN-OS 11.1.4-h34",
        "PAN-OS 11.1.4-h33",
        "PAN-OS 11.1.4-h32",
        "PAN-OS 11.1.4-h27",
        "PAN-OS 11.1.4-h25",
        "PAN-OS 11.1.4-h18",
        "PAN-OS 11.1.4-h17",
        "PAN-OS 11.1.4-h15",
        "PAN-OS 11.1.4-h13",
        "PAN-OS 11.1.4-h12",
        "PAN-OS 11.1.4-h11",
        "PAN-OS 11.1.4-h10",
        "PAN-OS 11.1.4-h9",
        "PAN-OS 11.1.4-h8",
        "PAN-OS 11.1.4-h7",
        "PAN-OS 11.1.4-h6",
        "PAN-OS 11.1.4-h5",
        "PAN-OS 11.1.4-h4",
        "PAN-OS 11.1.4-h3",
        "PAN-OS 11.1.4-h2",
        "PAN-OS 11.1.4-h1",
        "PAN-OS 11.1.4",
        "PAN-OS 11.1.3-h13",
        "PAN-OS 11.1.3-h12",
        "PAN-OS 11.1.3-h11",
        "PAN-OS 11.1.3-h10",
        "PAN-OS 11.1.3-h9",
        "PAN-OS 11.1.3-h8",
        "PAN-OS 11.1.3-h7",
        "PAN-OS 11.1.3-h6",
        "PAN-OS 11.1.3-h5",
        "PAN-OS 11.1.3-h4",
        "PAN-OS 11.1.3-h3",
        "PAN-OS 11.1.3-h2",
        "PAN-OS 11.1.3-h1",
        "PAN-OS 11.1.3",
        "PAN-OS 11.1.2-h18",
        "PAN-OS 11.1.2-h17",
        "PAN-OS 11.1.2-h16",
        "PAN-OS 11.1.2-h15",
        "PAN-OS 11.1.2-h14",
        "PAN-OS 11.1.2-h13",
        "PAN-OS 11.1.2-h12",
        "PAN-OS 11.1.2-h11",
        "PAN-OS 11.1.2-h10",
        "PAN-OS 11.1.2-h9",
        "PAN-OS 11.1.2-h8",
        "PAN-OS 11.1.2-h7",
        "PAN-OS 11.1.2-h6",
        "PAN-OS 11.1.2-h5",
        "PAN-OS 11.1.2-h4",
        "PAN-OS 11.1.2-h3",
        "PAN-OS 11.1.2-h2",
        "PAN-OS 11.1.2-h1",
        "PAN-OS 11.1.2",
        "PAN-OS 11.1.1-h2",
        "PAN-OS 11.1.1-h1",
        "PAN-OS 11.1.1",
        "PAN-OS 11.1.0-h4",
        "PAN-OS 11.1.0-h3",
        "PAN-OS 11.1.0-h2",
        "PAN-OS 11.1.0-h1",
        "PAN-OS 11.1.0",
        "PAN-OS 10.2.18-h10",
        "PAN-OS 10.2.18-h9",
        "PAN-OS 10.2.18-h8",
        "PAN-OS 10.2.18-h7",
        "PAN-OS 10.2.18-h6",
        "PAN-OS 10.2.18-h5",
        "PAN-OS 10.2.18-h1",
        "PAN-OS 10.2.18",
        "PAN-OS 10.2.17",
        "PAN-OS 10.2.16-h10",
        "PAN-OS 10.2.16-h9",
        "PAN-OS 10.2.16-h8",
        "PAN-OS 10.2.16-h7",
        "PAN-OS 10.2.16-h6",
        "PAN-OS 10.2.16-h4",
        "PAN-OS 10.2.16-h1",
        "PAN-OS 10.2.16",
        "PAN-OS 10.2.15",
        "PAN-OS 10.2.14-h1",
        "PAN-OS 10.2.14",
        "PAN-OS 10.2.13-h24",
        "PAN-OS 10.2.13-h23",
        "PAN-OS 10.2.13-h22",
        "PAN-OS 10.2.13-h21",
        "PAN-OS 10.2.13-h18",
        "PAN-OS 10.2.13-h16",
        "PAN-OS 10.2.13-h15",
        "PAN-OS 10.2.13-h10",
        "PAN-OS 10.2.13-h7",
        "PAN-OS 10.2.13-h5",
        "PAN-OS 10.2.13-h4",
        "PAN-OS 10.2.13-h3",
        "PAN-OS 10.2.13-h2",
        "PAN-OS 10.2.13-h1",
        "PAN-OS 10.2.13",
        "PAN-OS 10.2.12-h6",
        "PAN-OS 10.2.12-h5",
        "PAN-OS 10.2.12-h4",
        "PAN-OS 10.2.12-h3",
        "PAN-OS 10.2.12-h2",
        "PAN-OS 10.2.12-h1",
        "PAN-OS 10.2.12",
        "PAN-OS 10.2.11-h13",
        "PAN-OS 10.2.11-h12",
        "PAN-OS 10.2.11-h11",
        "PAN-OS 10.2.11-h10",
        "PAN-OS 10.2.11-h9",
        "PAN-OS 10.2.11-h8",
        "PAN-OS 10.2.11-h7",
        "PAN-OS 10.2.11-h6",
        "PAN-OS 10.2.11-h5",
        "PAN-OS 10.2.11-h4",
        "PAN-OS 10.2.11-h3",
        "PAN-OS 10.2.11-h2",
        "PAN-OS 10.2.11-h1",
        "PAN-OS 10.2.11",
        "PAN-OS 10.2.10-h40",
        "PAN-OS 10.2.10-h39",
        "PAN-OS 10.2.10-h37",
        "PAN-OS 10.2.10-h36",
        "PAN-OS 10.2.10-h31",
        "PAN-OS 10.2.10-h30",
        "PAN-OS 10.2.10-h27",
        "PAN-OS 10.2.10-h26",
        "PAN-OS 10.2.10-h23",
        "PAN-OS 10.2.10-h21",
        "PAN-OS 10.2.10-h18",
        "PAN-OS 10.2.10-h17",
        "PAN-OS 10.2.10-h14",
        "PAN-OS 10.2.10-h13",
        "PAN-OS 10.2.10-h12",
        "PAN-OS 10.2.10-h11",
        "PAN-OS 10.2.10-h10",
        "PAN-OS 10.2.10-h9",
        "PAN-OS 10.2.10-h8",
        "PAN-OS 10.2.10-h7",
        "PAN-OS 10.2.10-h6",
        "PAN-OS 10.2.10-h5",
        "PAN-OS 10.2.10-h4",
        "PAN-OS 10.2.10-h3",
        "PAN-OS 10.2.10-h2",
        "PAN-OS 10.2.10-h1",
        "PAN-OS 10.2.10",
        "PAN-OS 10.2.9-h21",
        "PAN-OS 10.2.9-h20",
        "PAN-OS 10.2.9-h19",
        "PAN-OS 10.2.9-h18",
        "PAN-OS 10.2.9-h17",
        "PAN-OS 10.2.9-h16",
        "PAN-OS 10.2.9-h15",
        "PAN-OS 10.2.9-h14",
        "PAN-OS 10.2.9-h13",
        "PAN-OS 10.2.9-h12",
        "PAN-OS 10.2.9-h11",
        "PAN-OS 10.2.9-h10",
        "PAN-OS 10.2.9-h9",
        "PAN-OS 10.2.9-h8",
        "PAN-OS 10.2.9-h7",
        "PAN-OS 10.2.9-h6",
        "PAN-OS 10.2.9-h5",
        "PAN-OS 10.2.9-h4",
        "PAN-OS 10.2.9-h3",
        "PAN-OS 10.2.9-h2",
        "PAN-OS 10.2.9-h1",
        "PAN-OS 10.2.9",
        "PAN-OS 10.2.8-h21",
        "PAN-OS 10.2.8-h20",
        "PAN-OS 10.2.8-h19",
        "PAN-OS 10.2.8-h18",
        "PAN-OS 10.2.8-h17",
        "PAN-OS 10.2.8-h16",
        "PAN-OS 10.2.8-h15",
        "PAN-OS 10.2.8-h14",
        "PAN-OS 10.2.8-h13",
        "PAN-OS 10.2.8-h12",
        "PAN-OS 10.2.8-h11",
        "PAN-OS 10.2.8-h10",
        "PAN-OS 10.2.8-h9",
        "PAN-OS 10.2.8-h8",
        "PAN-OS 10.2.8-h7",
        "PAN-OS 10.2.8-h6",
        "PAN-OS 10.2.8-h5",
        "PAN-OS 10.2.8-h4",
        "PAN-OS 10.2.8-h3",
        "PAN-OS 10.2.8-h2",
        "PAN-OS 10.2.8-h1",
        "PAN-OS 10.2.8",
        "PAN-OS 10.2.7-h37",
        "PAN-OS 10.2.7-h36",
        "PAN-OS 10.2.7-h35",
        "PAN-OS 10.2.7-h34",
        "PAN-OS 10.2.7-h32",
        "PAN-OS 10.2.7-h24",
        "PAN-OS 10.2.7-h23",
        "PAN-OS 10.2.7-h22",
        "PAN-OS 10.2.7-h21",
        "PAN-OS 10.2.7-h20",
        "PAN-OS 10.2.7-h19",
        "PAN-OS 10.2.7-h18",
        "PAN-OS 10.2.7-h17",
        "PAN-OS 10.2.7-h16",
        "PAN-OS 10.2.7-h15",
        "PAN-OS 10.2.7-h14",
        "PAN-OS 10.2.7-h13",
        "PAN-OS 10.2.7-h12",
        "PAN-OS 10.2.7-h11",
        "PAN-OS 10.2.7-h10",
        "PAN-OS 10.2.7-h9",
        "PAN-OS 10.2.7-h8",
        "PAN-OS 10.2.7-h7",
        "PAN-OS 10.2.7-h6",
        "PAN-OS 10.2.7-h5",
        "PAN-OS 10.2.7-h4",
        "PAN-OS 10.2.7-h3",
        "PAN-OS 10.2.7-h2",
        "PAN-OS 10.2.7-h1",
        "PAN-OS 10.2.7",
        "PAN-OS 10.2.6-h6",
        "PAN-OS 10.2.6-h5",
        "PAN-OS 10.2.6-h4",
        "PAN-OS 10.2.6-h3",
        "PAN-OS 10.2.6-h2",
        "PAN-OS 10.2.6-h1",
        "PAN-OS 10.2.6",
        "PAN-OS 10.2.5-h9",
        "PAN-OS 10.2.5-h8",
        "PAN-OS 10.2.5-h7",
        "PAN-OS 10.2.5-h6",
        "PAN-OS 10.2.5-h5",
        "PAN-OS 10.2.5-h4",
        "PAN-OS 10.2.5-h3",
        "PAN-OS 10.2.5-h2",
        "PAN-OS 10.2.5-h1",
        "PAN-OS 10.2.5",
        "PAN-OS 10.2.4-h32",
        "PAN-OS 10.2.4-h31",
        "PAN-OS 10.2.4-h30",
        "PAN-OS 10.2.4-h29",
        "PAN-OS 10.2.4-h28",
        "PAN-OS 10.2.4-h27",
        "PAN-OS 10.2.4-h26",
        "PAN-OS 10.2.4-h25",
        "PAN-OS 10.2.4-h24",
        "PAN-OS 10.2.4-h23",
        "PAN-OS 10.2.4-h22",
        "PAN-OS 10.2.4-h21",
        "PAN-OS 10.2.4-h20",
        "PAN-OS 10.2.4-h19",
        "PAN-OS 10.2.4-h18",
        "PAN-OS 10.2.4-h17",
        "PAN-OS 10.2.4-h16",
        "PAN-OS 10.2.4-h15",
        "PAN-OS 10.2.4-h14",
        "PAN-OS 10.2.4-h13",
        "PAN-OS 10.2.4-h12",
        "PAN-OS 10.2.4-h11",
        "PAN-OS 10.2.4-h10",
        "PAN-OS 10.2.4-h9",
        "PAN-OS 10.2.4-h8",
        "PAN-OS 10.2.4-h7",
        "PAN-OS 10.2.4-h6",
        "PAN-OS 10.2.4-h5",
        "PAN-OS 10.2.4-h4",
        "PAN-OS 10.2.4-h3",
        "PAN-OS 10.2.4-h2",
        "PAN-OS 10.2.4-h1",
        "PAN-OS 10.2.4",
        "PAN-OS 10.2.3-h14",
        "PAN-OS 10.2.3-h13",
        "PAN-OS 10.2.3-h12",
        "PAN-OS 10.2.3-h11",
        "PAN-OS 10.2.3-h10",
        "PAN-OS 10.2.3-h9",
        "PAN-OS 10.2.3-h8",
        "PAN-OS 10.2.3-h7",
        "PAN-OS 10.2.3-h6",
        "PAN-OS 10.2.3-h5",
        "PAN-OS 10.2.3-h4",
        "PAN-OS 10.2.3-h3",
        "PAN-OS 10.2.3-h2",
        "PAN-OS 10.2.3-h1",
        "PAN-OS 10.2.3",
        "PAN-OS 10.2.2-h6",
        "PAN-OS 10.2.2-h5",
        "PAN-OS 10.2.2-h4",
        "PAN-OS 10.2.2-h3",
        "PAN-OS 10.2.2-h2",
        "PAN-OS 10.2.2-h1",
        "PAN-OS 10.2.2",
        "PAN-OS 10.2.1-h3",
        "PAN-OS 10.2.1-h2",
        "PAN-OS 10.2.1-h1",
        "PAN-OS 10.2.1",
        "PAN-OS 10.2.0-h4",
        "PAN-OS 10.2.0-h3",
        "PAN-OS 10.2.0-h2",
        "PAN-OS 10.2.0-h1",
        "PAN-OS 10.2.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0321",
    "datePublished": "2026-10-14T19:58:55.823Z",
    "dateReserved": "2025-11-03T20:45:21.054Z",
    "dateUpdated": "2026-10-15T19:31:16.341Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-0322 (GCVE-0-2026-0322)

    Vulnerability from nvd – Published: 2026-10-14 17:26 – Updated: 2026-10-15 03:57
    VLAI CISA Previdian
    Title
    PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface
    Summary
    A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma® Access are not impacted by this vulnerability.
    Severity
    8.6 (High)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:N/R:U/V:D/RE:M/U:Red
    8.5 (High)
    CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:N/R:U/V:D/RE:M/U:Red
    SSVC
    Exploitation: active Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-14 00:00 UTC
    CWE
    • CWE-94 - Improper Control of Generation of Code ('Code Injection')
    Assigner
    palo_alto CNA under the mitre root
    CNA scorecard A 95/100 over 96 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Palo Alto Networks Cloud NGFW Unaffected: All (custom)
    		Create a notification for this product.
    Palo Alto Networks PAN-OS Affected: 12.2.0 , < 12.2.4 (custom)
    Affected: 12.1.0 , < 12.1.10-h2 (custom)
    Affected: 11.2.0 , < 11.2.16 (custom)
    Affected: 11.1.0 , < 11.1.16-h3 (custom)
    Affected: 10.2.0 , < 10.2.18-h12 (custom)
        cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h33:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h32:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h30:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h28:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h27:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h26:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h25:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h38:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h36:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h35:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h34:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h33:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h32:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h36:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h35:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h34:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h33:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h25:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h24:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h23:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h22:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h40:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h39:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h37:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h36:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h37:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h36:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h35:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h34:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h32:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h24:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h23:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h22:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h20:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h19:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h16:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*
    		Create a notification for this product.
    Palo Alto Networks Prisma Access Unaffected: All (custom)
    		Create a notification for this product.
    Date Public
    2026-10-14 16:00
    Credits
    Suraj Siddharudh (internal reporter)
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0322",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-14T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2026-10-14",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-0322"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T03:57:17.169Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-0322"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-10-14T00:00:00.000Z",
            "value": "CVE-2026-0322 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Cloud NGFW",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h33:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h32:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h30:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h28:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h27:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h26:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h25:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h38:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h35:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h34:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h33:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h32:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h35:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h34:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h33:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h25:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h24:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h22:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h40:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h39:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h37:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h37:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h35:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h34:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h32:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h24:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h22:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h20:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h19:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h16:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "PAN-OS",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.2.4",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.2.4",
              "status": "affected",
              "version": "12.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "12.1.4-h12",
                  "status": "unaffected"
                },
                {
                  "at": "12.1.7-h8",
                  "status": "unaffected"
                },
                {
                  "at": "12.1.10-h2",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.1.10-h2",
              "status": "affected",
              "version": "12.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.2.4-h22",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.7-h21",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.10-h15",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.13-h3",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.16",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.2.16",
              "status": "affected",
              "version": "11.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.1.4-h37",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.6-h39",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.7-h11",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.10-h35",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.13-h15",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.16-h3",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.1.16-h3",
              "status": "affected",
              "version": "11.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "10.2.7-h38",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.10-h41",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.13-h26",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.16-h11",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.18-h12",
                  "status": "unaffected"
                }
              ],
              "lessThan": "10.2.18-h12",
              "status": "affected",
              "version": "10.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Prisma Access",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:cloud_ngfw:all:*:*:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.2.4",
                  "versionStartIncluding": "12.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.1.10-h2",
                  "versionStartIncluding": "12.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.2.16",
                  "versionStartIncluding": "11.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.1.16-h3",
                  "versionStartIncluding": "11.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.2.18-h12",
                  "versionStartIncluding": "10.2.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:prisma_access:all:*:*:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Suraj Siddharudh (internal reporter)"
        }
      ],
      "datePublic": "2026-10-14T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS\u00ae software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.\u003c/p\u003e\u003cp\u003eThe security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended\u0026nbsp;\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431\"\u003ebest practice deployment guidelines\u003c/a\u003e.\u003c/p\u003e\u003cp\u003eThis issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).\u003c/p\u003e\u003cp\u003eCloud NGFW and Prisma\u00ae Access are not impacted by this vulnerability.\u003c/p\u003e"
            }
          ],
          "value": "A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS\u00ae software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.\n\n\n\nThe security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended\u00a0 best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .\n\n\n\nThis issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).\n\n\n\nCloud NGFW and Prisma\u00ae Access are not impacted by this vulnerability."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003eVery limited exploitation has been observed targeting the Palo Alto Networks management interface.\u003c/span\u003e"
            }
          ],
          "value": "Very limited exploitation has been observed targeting the Palo Alto Networks management interface."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-242",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-242 Code Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "exploitMaturity": "ATTACKED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "RED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:N/R:U/V:D/RE:M/U:Red",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "The risk is highest when you allow access to the management interface from external IP addresses on the internet. Our recommendation is to remediate as soon as possible."
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "ADJACENT",
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "exploitMaturity": "ATTACKED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "RED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:N/R:U/V:D/RE:M/U:Red",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "You can reduce the risk of exploitation by restricting access to a jump box that is the only system allowed to access the management interface."
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T17:26:52.448Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0322"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 12.2\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.2.0 through 12.2.3\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.2.4 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 12.1\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.1.8 through 12.1.10-h* \u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.1.10-h2 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.1.5 through 12.1.7-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.1.7-h8 or 12.1.10-h2 or later.\u003cbr\u003e\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.1.2 through 12.1.4-h*\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.1.4-h12 or 12.1.10-h2 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 11.2\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.14 through 11.2.15 \u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.11 through 11.2.13-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.13-h3 or 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.8 through 11.2.10-h*\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.10-h15 or 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.5 through 11.2.7-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.7-h21 or 11.2.16 or later.\u003cbr\u003e\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.0 through 11.2.4-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.4-h22 or 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 11.1\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.14 through 11.1.16-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.11 through 11.1.13-h*\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.13-h15 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.8 through 11.1.10-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.10-h35 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.7 through 11.1.7-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.7-h11 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.5 through 11.1.6-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.6-h39 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.0 through 11.1.4-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.4-h37 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 10.2\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.17 through 10.2.18-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.14 through 10.2.16-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.16-h11 or 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.11 through 10.2.13-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.13-h26 or 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.8 through 10.2.10-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.10-h41 or 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.0 through 10.2.7-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.7-h38 or 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "Version\nMinor Version\nSuggested Solution\n\n                                PAN-OS 12.2\n\n                                12.2.0 through 12.2.3\n                                Upgrade to 12.2.4 or later.\n                            \n                                PAN-OS 12.1\n\n                                12.1.8 through 12.1.10-h* \n                                Upgrade to 12.1.10-h2 or later.\n                            \n                                \n                                12.1.5 through 12.1.7-h*\n                                Upgrade to 12.1.7-h8 or 12.1.10-h2 or later.\n\n                            \n                                \n                                12.1.2 through 12.1.4-h*\n\n                                Upgrade to 12.1.4-h12 or 12.1.10-h2 or later.\n                            \n                                PAN-OS 11.2\n\n                                11.2.14 through 11.2.15 \n                                Upgrade to 11.2.16 or later.\n                            \n                                \n                                11.2.11 through 11.2.13-h*\n                                Upgrade to 11.2.13-h3 or 11.2.16 or later.\n                            \n                                \n                                11.2.8 through 11.2.10-h*\n\n                                Upgrade to 11.2.10-h15 or 11.2.16 or later.\n                            \n                                \n                                11.2.5 through 11.2.7-h*\n                                Upgrade to 11.2.7-h21 or 11.2.16 or later.\n\n                            \n                                \n                                11.2.0 through 11.2.4-h*\n                                Upgrade to 11.2.4-h22 or 11.2.16 or later.\n                            \n                                PAN-OS 11.1\n\n                                11.1.14 through 11.1.16-h*\n                                Upgrade to 11.1.16-h3 or later.\n                            \n                                \n                                11.1.11 through 11.1.13-h*\n\n                                Upgrade to 11.1.13-h15 or 11.1.16-h3 or later.\n                            \n                                \n                                11.1.8 through 11.1.10-h*\n                                Upgrade to 11.1.10-h35 or 11.1.16-h3 or later.\n                            \n                                \n                                11.1.7 through 11.1.7-h*\n                                Upgrade to 11.1.7-h11 or 11.1.16-h3 or later.\n                            \n                                \n                                11.1.5 through 11.1.6-h*\n                                Upgrade to 11.1.6-h39 or 11.1.16-h3 or later.\n                            \n                                \n                                11.1.0 through 11.1.4-h*\n                                Upgrade to 11.1.4-h37 or 11.1.16-h3 or later.\n                            \n                                PAN-OS 10.2\n\n                                10.2.17 through 10.2.18-h*\n                                Upgrade to 10.2.18-h12 or later.\n                            \n                                \n                                10.2.14 through 10.2.16-h*\n                                Upgrade to 10.2.16-h11 or 10.2.18-h12 or later.\n                            \n                                \n                                10.2.11 through 10.2.13-h*\n                                Upgrade to 10.2.13-h26 or 10.2.18-h12 or later.\n                            \n                                \n                                10.2.8 through 10.2.10-h*\n                                Upgrade to 10.2.10-h41 or 10.2.18-h12 or later.\n                            \n                                \n                                10.2.0 through 10.2.7-h*\n                                Upgrade to 10.2.7-h38 or 10.2.18-h12 or later."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-14T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNo known workarounds exist for this issue.\u003c/p\u003e\u003cp\u003eCustomers with a Threat Prevention subscription are provided with limited coverage against this vulnerability by enabling Threat ID\u0026nbsp;510046 and 510047 (from Applications and Threats content version 9159-10287 and later). For these Threat IDs to protect against attacks for this vulnerability:\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices#id59206398-3dab-4b2f-9b4b-7ea500d036ba\"\u003eRoute incoming traffic for the MGT port through a DP port\u003c/a\u003e, e.g., enabling management profile on a DP interface for management access.\u003cbr\u003e\u003c/li\u003e\u003cli\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices#id112f7714-8995-4496-bbf9-781e63dec71c\"\u003eReplace the Certificate for Inbound Traffic Management\u003c/a\u003e.\u003c/li\u003e\u003cli\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices#idbbd82587-17a2-42b4-9245-d3714e1e13a2\"\u003eDecrypt inbound traffic to the management interface so the firewall can inspect it\u003c/a\u003e.\u003c/li\u003e\u003cli\u003eEnable threat prevention on the inbound traffic to management services.\u003c/li\u003e\u003c/ul\u003e\u003cp\u003ePlease note that this Threat ID requires SSL Decryption.\u003c/p\u003e\u003cp\u003e\u003c/p\u003e"
            }
          ],
          "value": "No known workarounds exist for this issue.\n\n\n\nCustomers with a Threat Prevention subscription are provided with limited coverage against this vulnerability by enabling Threat ID\u00a0510046 and 510047 (from Applications and Threats content version 9159-10287 and later). For these Threat IDs to protect against attacks for this vulnerability:\n\n\n\n\n\n  *   Route incoming traffic for the MGT port through a DP port https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices#id59206398-3dab-4b2f-9b4b-7ea500d036ba , e.g., enabling management profile on a DP interface for management access.\n\n  *   Replace the Certificate for Inbound Traffic Management https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices#id112f7714-8995-4496-bbf9-781e63dec71c .\n  *   Decrypt inbound traffic to the management interface so the firewall can inspect it https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices#idbbd82587-17a2-42b4-9245-d3714e1e13a2 .\n  *  Enable threat prevention on the inbound traffic to management services.\n\n\n\n\nPlease note that this Threat ID requires SSL Decryption."
        }
      ],
      "x_affectedList": [
        "PAN-OS 12.2.3",
        "PAN-OS 12.2.2",
        "PAN-OS 12.1.10",
        "PAN-OS 12.1.9",
        "PAN-OS 12.1.8",
        "PAN-OS 12.1.7-h6",
        "PAN-OS 12.1.7-h5",
        "PAN-OS 12.1.7-h3",
        "PAN-OS 12.1.7-h2",
        "PAN-OS 12.1.7-h1",
        "PAN-OS 12.1.7",
        "PAN-OS 12.1.6",
        "PAN-OS 12.1.5",
        "PAN-OS 12.1.4-h11",
        "PAN-OS 12.1.4-h10",
        "PAN-OS 12.1.4-h9",
        "PAN-OS 12.1.4-h8",
        "PAN-OS 12.1.4-h7",
        "PAN-OS 12.1.4-h6",
        "PAN-OS 12.1.4-h5",
        "PAN-OS 12.1.4-h3",
        "PAN-OS 12.1.4-h2",
        "PAN-OS 12.1.4",
        "PAN-OS 12.1.3-h3",
        "PAN-OS 12.1.3-h1",
        "PAN-OS 12.1.3",
        "PAN-OS 12.1.2",
        "PAN-OS 11.2.15",
        "PAN-OS 11.2.13-h2",
        "PAN-OS 11.2.13-h1",
        "PAN-OS 11.2.13",
        "PAN-OS 11.2.12",
        "PAN-OS 11.2.11",
        "PAN-OS 11.2.10-h14",
        "PAN-OS 11.2.10-h13",
        "PAN-OS 11.2.10-h12",
        "PAN-OS 11.2.10-h10",
        "PAN-OS 11.2.10-h9",
        "PAN-OS 11.2.10-h8",
        "PAN-OS 11.2.10-h7",
        "PAN-OS 11.2.10-h6",
        "PAN-OS 11.2.10-h5",
        "PAN-OS 11.2.10-h4",
        "PAN-OS 11.2.10-h3",
        "PAN-OS 11.2.10-h2",
        "PAN-OS 11.2.10-h1",
        "PAN-OS 11.2.10",
        "PAN-OS 11.2.9",
        "PAN-OS 11.2.8",
        "PAN-OS 11.2.7-h20",
        "PAN-OS 11.2.7-h19",
        "PAN-OS 11.2.7-h18",
        "PAN-OS 11.2.7-h17",
        "PAN-OS 11.2.7-h16",
        "PAN-OS 11.2.7-h15",
        "PAN-OS 11.2.7-h14",
        "PAN-OS 11.2.7-h13",
        "PAN-OS 11.2.7-h12",
        "PAN-OS 11.2.7-h11",
        "PAN-OS 11.2.7-h10",
        "PAN-OS 11.2.7-h8",
        "PAN-OS 11.2.7-h7",
        "PAN-OS 11.2.7-h4",
        "PAN-OS 11.2.7-h3",
        "PAN-OS 11.2.7-h2",
        "PAN-OS 11.2.7-h1",
        "PAN-OS 11.2.7",
        "PAN-OS 11.2.6",
        "PAN-OS 11.2.5",
        "PAN-OS 11.2.4-h21",
        "PAN-OS 11.2.4-h20",
        "PAN-OS 11.2.4-h18",
        "PAN-OS 11.2.4-h17",
        "PAN-OS 11.2.4-h15",
        "PAN-OS 11.2.4-h14",
        "PAN-OS 11.2.4-h12",
        "PAN-OS 11.2.4-h11",
        "PAN-OS 11.2.4-h10",
        "PAN-OS 11.2.4-h9",
        "PAN-OS 11.2.4-h8",
        "PAN-OS 11.2.4-h7",
        "PAN-OS 11.2.4-h6",
        "PAN-OS 11.2.4-h5",
        "PAN-OS 11.2.4-h4",
        "PAN-OS 11.2.4-h3",
        "PAN-OS 11.2.4-h2",
        "PAN-OS 11.2.4-h1",
        "PAN-OS 11.2.4",
        "PAN-OS 11.2.3-h5",
        "PAN-OS 11.2.3-h4",
        "PAN-OS 11.2.3-h3",
        "PAN-OS 11.2.3-h2",
        "PAN-OS 11.2.3-h1",
        "PAN-OS 11.2.3",
        "PAN-OS 11.2.2-h2",
        "PAN-OS 11.2.2-h1",
        "PAN-OS 11.2.1-h1",
        "PAN-OS 11.2.1",
        "PAN-OS 11.2.0-h1",
        "PAN-OS 11.2.0",
        "PAN-OS 11.1.16-h2",
        "PAN-OS 11.1.16-h1",
        "PAN-OS 11.1.16",
        "PAN-OS 11.1.15",
        "PAN-OS 11.1.14",
        "PAN-OS 11.1.13-h12",
        "PAN-OS 11.1.13-h11",
        "PAN-OS 11.1.13-h10",
        "PAN-OS 11.1.13-h9",
        "PAN-OS 11.1.13-h8",
        "PAN-OS 11.1.13-h7",
        "PAN-OS 11.1.13-h6",
        "PAN-OS 11.1.13-h5",
        "PAN-OS 11.1.13-h3",
        "PAN-OS 11.1.13-h2",
        "PAN-OS 11.1.13-h1",
        "PAN-OS 11.1.13",
        "PAN-OS 11.1.12",
        "PAN-OS 11.1.11",
        "PAN-OS 11.1.10-h33",
        "PAN-OS 11.1.10-h32",
        "PAN-OS 11.1.10-h30",
        "PAN-OS 11.1.10-h28",
        "PAN-OS 11.1.10-h27",
        "PAN-OS 11.1.10-h26",
        "PAN-OS 11.1.10-h25",
        "PAN-OS 11.1.10-h21",
        "PAN-OS 11.1.10-h12",
        "PAN-OS 11.1.10-h10",
        "PAN-OS 11.1.10-h9",
        "PAN-OS 11.1.10-h7",
        "PAN-OS 11.1.10-h5",
        "PAN-OS 11.1.10-h4",
        "PAN-OS 11.1.10-h1",
        "PAN-OS 11.1.10",
        "PAN-OS 11.1.9",
        "PAN-OS 11.1.8",
        "PAN-OS 11.1.6-h38",
        "PAN-OS 11.1.6-h36",
        "PAN-OS 11.1.6-h35",
        "PAN-OS 11.1.6-h34",
        "PAN-OS 11.1.6-h33",
        "PAN-OS 11.1.6-h32",
        "PAN-OS 11.1.6-h29",
        "PAN-OS 11.1.6-h25",
        "PAN-OS 11.1.6-h23",
        "PAN-OS 11.1.6-h22",
        "PAN-OS 11.1.6-h21",
        "PAN-OS 11.1.6-h20",
        "PAN-OS 11.1.6-h19",
        "PAN-OS 11.1.6-h18",
        "PAN-OS 11.1.6-h17",
        "PAN-OS 11.1.6-h14",
        "PAN-OS 11.1.6-h10",
        "PAN-OS 11.1.6-h7",
        "PAN-OS 11.1.6-h6",
        "PAN-OS 11.1.6-h4",
        "PAN-OS 11.1.6-h3",
        "PAN-OS 11.1.6-h2",
        "PAN-OS 11.1.6-h1",
        "PAN-OS 11.1.6",
        "PAN-OS 11.1.5-h1",
        "PAN-OS 11.1.5",
        "PAN-OS 11.1.4-h36",
        "PAN-OS 11.1.4-h35",
        "PAN-OS 11.1.4-h34",
        "PAN-OS 11.1.4-h33",
        "PAN-OS 11.1.4-h32",
        "PAN-OS 11.1.4-h27",
        "PAN-OS 11.1.4-h25",
        "PAN-OS 11.1.4-h18",
        "PAN-OS 11.1.4-h17",
        "PAN-OS 11.1.4-h15",
        "PAN-OS 11.1.4-h13",
        "PAN-OS 11.1.4-h12",
        "PAN-OS 11.1.4-h11",
        "PAN-OS 11.1.4-h10",
        "PAN-OS 11.1.4-h9",
        "PAN-OS 11.1.4-h8",
        "PAN-OS 11.1.4-h7",
        "PAN-OS 11.1.4-h6",
        "PAN-OS 11.1.4-h5",
        "PAN-OS 11.1.4-h4",
        "PAN-OS 11.1.4-h3",
        "PAN-OS 11.1.4-h2",
        "PAN-OS 11.1.4-h1",
        "PAN-OS 11.1.4",
        "PAN-OS 11.1.3-h13",
        "PAN-OS 11.1.3-h12",
        "PAN-OS 11.1.3-h11",
        "PAN-OS 11.1.3-h10",
        "PAN-OS 11.1.3-h9",
        "PAN-OS 11.1.3-h8",
        "PAN-OS 11.1.3-h7",
        "PAN-OS 11.1.3-h6",
        "PAN-OS 11.1.3-h5",
        "PAN-OS 11.1.3-h4",
        "PAN-OS 11.1.3-h3",
        "PAN-OS 11.1.3-h2",
        "PAN-OS 11.1.3-h1",
        "PAN-OS 11.1.3",
        "PAN-OS 11.1.2-h18",
        "PAN-OS 11.1.2-h17",
        "PAN-OS 11.1.2-h16",
        "PAN-OS 11.1.2-h15",
        "PAN-OS 11.1.2-h14",
        "PAN-OS 11.1.2-h13",
        "PAN-OS 11.1.2-h12",
        "PAN-OS 11.1.2-h11",
        "PAN-OS 11.1.2-h10",
        "PAN-OS 11.1.2-h9",
        "PAN-OS 11.1.2-h8",
        "PAN-OS 11.1.2-h7",
        "PAN-OS 11.1.2-h6",
        "PAN-OS 11.1.2-h5",
        "PAN-OS 11.1.2-h4",
        "PAN-OS 11.1.2-h3",
        "PAN-OS 11.1.2-h2",
        "PAN-OS 11.1.2-h1",
        "PAN-OS 11.1.2",
        "PAN-OS 11.1.1-h2",
        "PAN-OS 11.1.1-h1",
        "PAN-OS 11.1.1",
        "PAN-OS 11.1.0-h4",
        "PAN-OS 11.1.0-h3",
        "PAN-OS 11.1.0-h2",
        "PAN-OS 11.1.0-h1",
        "PAN-OS 11.1.0",
        "PAN-OS 10.2.18-h10",
        "PAN-OS 10.2.18-h9",
        "PAN-OS 10.2.18-h8",
        "PAN-OS 10.2.18-h7",
        "PAN-OS 10.2.18-h6",
        "PAN-OS 10.2.18-h5",
        "PAN-OS 10.2.18-h1",
        "PAN-OS 10.2.18",
        "PAN-OS 10.2.17",
        "PAN-OS 10.2.16-h10",
        "PAN-OS 10.2.16-h9",
        "PAN-OS 10.2.16-h8",
        "PAN-OS 10.2.16-h7",
        "PAN-OS 10.2.16-h6",
        "PAN-OS 10.2.16-h4",
        "PAN-OS 10.2.16-h1",
        "PAN-OS 10.2.16",
        "PAN-OS 10.2.15",
        "PAN-OS 10.2.14-h1",
        "PAN-OS 10.2.14",
        "PAN-OS 10.2.13-h24",
        "PAN-OS 10.2.13-h23",
        "PAN-OS 10.2.13-h22",
        "PAN-OS 10.2.13-h21",
        "PAN-OS 10.2.13-h18",
        "PAN-OS 10.2.13-h16",
        "PAN-OS 10.2.13-h15",
        "PAN-OS 10.2.13-h10",
        "PAN-OS 10.2.13-h7",
        "PAN-OS 10.2.13-h5",
        "PAN-OS 10.2.13-h4",
        "PAN-OS 10.2.13-h3",
        "PAN-OS 10.2.13-h2",
        "PAN-OS 10.2.13-h1",
        "PAN-OS 10.2.13",
        "PAN-OS 10.2.12-h6",
        "PAN-OS 10.2.12-h5",
        "PAN-OS 10.2.12-h4",
        "PAN-OS 10.2.12-h3",
        "PAN-OS 10.2.12-h2",
        "PAN-OS 10.2.12-h1",
        "PAN-OS 10.2.12",
        "PAN-OS 10.2.11-h13",
        "PAN-OS 10.2.11-h12",
        "PAN-OS 10.2.11-h11",
        "PAN-OS 10.2.11-h10",
        "PAN-OS 10.2.11-h9",
        "PAN-OS 10.2.11-h8",
        "PAN-OS 10.2.11-h7",
        "PAN-OS 10.2.11-h6",
        "PAN-OS 10.2.11-h5",
        "PAN-OS 10.2.11-h4",
        "PAN-OS 10.2.11-h3",
        "PAN-OS 10.2.11-h2",
        "PAN-OS 10.2.11-h1",
        "PAN-OS 10.2.11",
        "PAN-OS 10.2.10-h40",
        "PAN-OS 10.2.10-h39",
        "PAN-OS 10.2.10-h37",
        "PAN-OS 10.2.10-h36",
        "PAN-OS 10.2.10-h31",
        "PAN-OS 10.2.10-h30",
        "PAN-OS 10.2.10-h27",
        "PAN-OS 10.2.10-h26",
        "PAN-OS 10.2.10-h23",
        "PAN-OS 10.2.10-h21",
        "PAN-OS 10.2.10-h18",
        "PAN-OS 10.2.10-h17",
        "PAN-OS 10.2.10-h14",
        "PAN-OS 10.2.10-h13",
        "PAN-OS 10.2.10-h12",
        "PAN-OS 10.2.10-h11",
        "PAN-OS 10.2.10-h10",
        "PAN-OS 10.2.10-h9",
        "PAN-OS 10.2.10-h8",
        "PAN-OS 10.2.10-h7",
        "PAN-OS 10.2.10-h6",
        "PAN-OS 10.2.10-h5",
        "PAN-OS 10.2.10-h4",
        "PAN-OS 10.2.10-h3",
        "PAN-OS 10.2.10-h2",
        "PAN-OS 10.2.10-h1",
        "PAN-OS 10.2.10",
        "PAN-OS 10.2.9-h21",
        "PAN-OS 10.2.9-h20",
        "PAN-OS 10.2.9-h19",
        "PAN-OS 10.2.9-h18",
        "PAN-OS 10.2.9-h17",
        "PAN-OS 10.2.9-h16",
        "PAN-OS 10.2.9-h15",
        "PAN-OS 10.2.9-h14",
        "PAN-OS 10.2.9-h13",
        "PAN-OS 10.2.9-h12",
        "PAN-OS 10.2.9-h11",
        "PAN-OS 10.2.9-h10",
        "PAN-OS 10.2.9-h9",
        "PAN-OS 10.2.9-h8",
        "PAN-OS 10.2.9-h7",
        "PAN-OS 10.2.9-h6",
        "PAN-OS 10.2.9-h5",
        "PAN-OS 10.2.9-h4",
        "PAN-OS 10.2.9-h3",
        "PAN-OS 10.2.9-h2",
        "PAN-OS 10.2.9-h1",
        "PAN-OS 10.2.9",
        "PAN-OS 10.2.8-h21",
        "PAN-OS 10.2.8-h20",
        "PAN-OS 10.2.8-h19",
        "PAN-OS 10.2.8-h18",
        "PAN-OS 10.2.8-h17",
        "PAN-OS 10.2.8-h16",
        "PAN-OS 10.2.8-h15",
        "PAN-OS 10.2.8-h14",
        "PAN-OS 10.2.8-h13",
        "PAN-OS 10.2.8-h12",
        "PAN-OS 10.2.8-h11",
        "PAN-OS 10.2.8-h10",
        "PAN-OS 10.2.8-h9",
        "PAN-OS 10.2.8-h8",
        "PAN-OS 10.2.8-h7",
        "PAN-OS 10.2.8-h6",
        "PAN-OS 10.2.8-h5",
        "PAN-OS 10.2.8-h4",
        "PAN-OS 10.2.8-h3",
        "PAN-OS 10.2.8-h2",
        "PAN-OS 10.2.8-h1",
        "PAN-OS 10.2.8",
        "PAN-OS 10.2.7-h37",
        "PAN-OS 10.2.7-h36",
        "PAN-OS 10.2.7-h35",
        "PAN-OS 10.2.7-h34",
        "PAN-OS 10.2.7-h32",
        "PAN-OS 10.2.7-h24",
        "PAN-OS 10.2.7-h23",
        "PAN-OS 10.2.7-h22",
        "PAN-OS 10.2.7-h21",
        "PAN-OS 10.2.7-h20",
        "PAN-OS 10.2.7-h19",
        "PAN-OS 10.2.7-h18",
        "PAN-OS 10.2.7-h17",
        "PAN-OS 10.2.7-h16",
        "PAN-OS 10.2.7-h15",
        "PAN-OS 10.2.7-h14",
        "PAN-OS 10.2.7-h13",
        "PAN-OS 10.2.7-h12",
        "PAN-OS 10.2.7-h11",
        "PAN-OS 10.2.7-h10",
        "PAN-OS 10.2.7-h9",
        "PAN-OS 10.2.7-h8",
        "PAN-OS 10.2.7-h7",
        "PAN-OS 10.2.7-h6",
        "PAN-OS 10.2.7-h5",
        "PAN-OS 10.2.7-h4",
        "PAN-OS 10.2.7-h3",
        "PAN-OS 10.2.7-h2",
        "PAN-OS 10.2.7-h1",
        "PAN-OS 10.2.7",
        "PAN-OS 10.2.6-h6",
        "PAN-OS 10.2.6-h5",
        "PAN-OS 10.2.6-h4",
        "PAN-OS 10.2.6-h3",
        "PAN-OS 10.2.6-h2",
        "PAN-OS 10.2.6-h1",
        "PAN-OS 10.2.6",
        "PAN-OS 10.2.5-h9",
        "PAN-OS 10.2.5-h8",
        "PAN-OS 10.2.5-h7",
        "PAN-OS 10.2.5-h6",
        "PAN-OS 10.2.5-h5",
        "PAN-OS 10.2.5-h4",
        "PAN-OS 10.2.5-h3",
        "PAN-OS 10.2.5-h2",
        "PAN-OS 10.2.5-h1",
        "PAN-OS 10.2.5",
        "PAN-OS 10.2.4-h32",
        "PAN-OS 10.2.4-h31",
        "PAN-OS 10.2.4-h30",
        "PAN-OS 10.2.4-h29",
        "PAN-OS 10.2.4-h28",
        "PAN-OS 10.2.4-h27",
        "PAN-OS 10.2.4-h26",
        "PAN-OS 10.2.4-h25",
        "PAN-OS 10.2.4-h24",
        "PAN-OS 10.2.4-h23",
        "PAN-OS 10.2.4-h22",
        "PAN-OS 10.2.4-h21",
        "PAN-OS 10.2.4-h20",
        "PAN-OS 10.2.4-h19",
        "PAN-OS 10.2.4-h18",
        "PAN-OS 10.2.4-h17",
        "PAN-OS 10.2.4-h16",
        "PAN-OS 10.2.4-h15",
        "PAN-OS 10.2.4-h14",
        "PAN-OS 10.2.4-h13",
        "PAN-OS 10.2.4-h12",
        "PAN-OS 10.2.4-h11",
        "PAN-OS 10.2.4-h10",
        "PAN-OS 10.2.4-h9",
        "PAN-OS 10.2.4-h8",
        "PAN-OS 10.2.4-h7",
        "PAN-OS 10.2.4-h6",
        "PAN-OS 10.2.4-h5",
        "PAN-OS 10.2.4-h4",
        "PAN-OS 10.2.4-h3",
        "PAN-OS 10.2.4-h2",
        "PAN-OS 10.2.4-h1",
        "PAN-OS 10.2.4",
        "PAN-OS 10.2.3-h14",
        "PAN-OS 10.2.3-h13",
        "PAN-OS 10.2.3-h12",
        "PAN-OS 10.2.3-h11",
        "PAN-OS 10.2.3-h10",
        "PAN-OS 10.2.3-h9",
        "PAN-OS 10.2.3-h8",
        "PAN-OS 10.2.3-h7",
        "PAN-OS 10.2.3-h6",
        "PAN-OS 10.2.3-h5",
        "PAN-OS 10.2.3-h4",
        "PAN-OS 10.2.3-h3",
        "PAN-OS 10.2.3-h2",
        "PAN-OS 10.2.3-h1",
        "PAN-OS 10.2.3",
        "PAN-OS 10.2.2-h6",
        "PAN-OS 10.2.2-h5",
        "PAN-OS 10.2.2-h4",
        "PAN-OS 10.2.2-h3",
        "PAN-OS 10.2.2-h2",
        "PAN-OS 10.2.2-h1",
        "PAN-OS 10.2.2",
        "PAN-OS 10.2.1-h3",
        "PAN-OS 10.2.1-h2",
        "PAN-OS 10.2.1-h1",
        "PAN-OS 10.2.1",
        "PAN-OS 10.2.0-h4",
        "PAN-OS 10.2.0-h3",
        "PAN-OS 10.2.0-h2",
        "PAN-OS 10.2.0-h1",
        "PAN-OS 10.2.0"
      ],
      "x_cpeGeneratedAt": "2026-10-14T15:56:39.967Z",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0322",
    "datePublished": "2026-10-14T17:26:52.448Z",
    "dateReserved": "2025-11-03T20:46:23.966Z",
    "dateUpdated": "2026-10-15T03:57:17.169Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-0304 (GCVE-0-2026-0304)

    Vulnerability from nvd – Published: 2026-09-10 06:02 – Updated: 2026-09-11 03:56
    VLAI
    Title
    Cortex XDR Broker VM: Privilege Escalation Vulnerability
    Summary
    A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle (MitM) access to execute code with root privileges on the Broker VM.
    Severity
    4.8 (Medium)
    CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:U/AU:N/R:U/V:D/RE:M/U:Amber
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-10 00:00 UTC
    CWE
    • CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
    Assigner
    palo_alto CNA under the mitre root
    CNA scorecard A 95/100 over 96 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Palo Alto Networks Cortex XDR Broker VM Affected: 20.0.96 , < 32.0.52 (custom)
        cpe:2.3:a:palo_alto_networks:cortex_xdr_broker_vm:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Date Public
    2026-09-09 16:00
    Credits
    internal security research teams
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0304",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-10T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-11T03:56:03.202Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Cortex XDR Broker VM",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "32.0.52",
                  "status": "unaffected"
                }
              ],
              "lessThan": "32.0.52",
              "status": "affected",
              "version": "20.0.96",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue on brokers that process cloud-delivered mount actions."
            }
          ],
          "value": "No special configuration is required to be affected by this issue on brokers that process cloud-delivered mount actions."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:cortex_xdr_broker_vm:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "32.0.52",
                  "versionStartIncluding": "32.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "internal security research teams"
        }
      ],
      "datePublic": "2026-09-09T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle (MitM) access to execute code with root privileges on the Broker VM."
            }
          ],
          "value": "A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle (MitM) access to execute code with root privileges on the Broker VM."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-126",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-126 Path Traversal"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "ADJACENT",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "LOW",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "LOW",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-88",
              "description": "CWE-88 Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-10T06:02:24.553Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0304"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cspan\u003eThis issue is fixed in Cortex XDR Broker VM 32.0.52, and all later Cortex XDR Broker VM versions.\u003c/span\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003e\u003cp\u003e\u003cspan\u003eIf automatic upgrades are enabled for Broker VM, then no action is required at this time.\u003c/span\u003e\u003c/p\u003e\u003c/li\u003e\u003c/ul\u003e\u003cb\u003e\u003c/b\u003e\u003cul\u003e\u003cli\u003e\u003cp\u003e\u003cspan\u003eIf automatic upgrades are not enabled for Broker VM, then we recommend that you do so to ensure that you always have the latest security patches installed in your software\u003c/span\u003e\u003c/p\u003e\u003c/li\u003e\u003c/ul\u003e"
            }
          ],
          "value": "This issue is fixed in Cortex XDR Broker VM 32.0.52, and all later Cortex XDR Broker VM versions.\n\n * If automatic upgrades are enabled for Broker VM, then no action is required at this time.\n\n * If automatic upgrades are not enabled for Broker VM, then we recommend that you do so to ensure that you always have the latest security patches installed in your software"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-09-09T16:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "Cortex XDR Broker VM: Privilege Escalation Vulnerability",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No known workarounds exist for this issue."
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_affectedList": [
        "Cortex XDR Broker VM 32.0.0",
        "Cortex XDR Broker VM 32.0.1",
        "Cortex XDR Broker VM 32.0.2",
        "Cortex XDR Broker VM 32.0.3",
        "Cortex XDR Broker VM 32.0.4",
        "Cortex XDR Broker VM 32.0.5",
        "Cortex XDR Broker VM 32.0.6",
        "Cortex XDR Broker VM 32.0.7",
        "Cortex XDR Broker VM 32.0.8",
        "Cortex XDR Broker VM 32.0.9",
        "Cortex XDR Broker VM 32.0.10",
        "Cortex XDR Broker VM 32.0.11",
        "Cortex XDR Broker VM 32.0.12",
        "Cortex XDR Broker VM 32.0.13",
        "Cortex XDR Broker VM 32.0.14",
        "Cortex XDR Broker VM 32.0.15",
        "Cortex XDR Broker VM 32.0.16",
        "Cortex XDR Broker VM 32.0.17",
        "Cortex XDR Broker VM 32.0.18",
        "Cortex XDR Broker VM 32.0.19",
        "Cortex XDR Broker VM 32.0.20",
        "Cortex XDR Broker VM 32.0.21",
        "Cortex XDR Broker VM 32.0.22",
        "Cortex XDR Broker VM 32.0.23",
        "Cortex XDR Broker VM 32.0.24",
        "Cortex XDR Broker VM 32.0.25",
        "Cortex XDR Broker VM 32.0.26",
        "Cortex XDR Broker VM 32.0.27",
        "Cortex XDR Broker VM 32.0.28",
        "Cortex XDR Broker VM 32.0.29",
        "Cortex XDR Broker VM 32.0.30",
        "Cortex XDR Broker VM 32.0.31",
        "Cortex XDR Broker VM 32.0.32",
        "Cortex XDR Broker VM 32.0.33",
        "Cortex XDR Broker VM 32.0.34",
        "Cortex XDR Broker VM 32.0.35",
        "Cortex XDR Broker VM 32.0.36",
        "Cortex XDR Broker VM 32.0.37",
        "Cortex XDR Broker VM 32.0.38",
        "Cortex XDR Broker VM 32.0.39",
        "Cortex XDR Broker VM 32.0.40",
        "Cortex XDR Broker VM 32.0.41",
        "Cortex XDR Broker VM 32.0.42",
        "Cortex XDR Broker VM 32.0.43",
        "Cortex XDR Broker VM 32.0.44",
        "Cortex XDR Broker VM 32.0.45",
        "Cortex XDR Broker VM 32.0.46",
        "Cortex XDR Broker VM 32.0.47",
        "Cortex XDR Broker VM 32.0.48",
        "Cortex XDR Broker VM 32.0.49",
        "Cortex XDR Broker VM 32.0.50",
        "Cortex XDR Broker VM 32.0.51"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0304",
    "datePublished": "2026-09-10T06:02:24.553Z",
    "dateReserved": "2025-11-03T20:45:02.858Z",
    "dateUpdated": "2026-09-11T03:56:03.202Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-0303 (GCVE-0-2026-0303)

    Vulnerability from nvd – Published: 2026-09-10 06:03 – Updated: 2026-09-10 13:01
    VLAI
    Title
    Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File
    Summary
    A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.
    Severity
    2.4 (Low)
    CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-10 13:01 UTC
    CWE
    • CWE-829 - Inclusion of Functionality from Untrusted Control Sphere
    Assigner
    palo_alto CNA under the mitre root
    CNA scorecard A 95/100 over 96 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Palo Alto Networks Checkov by Prisma Cloud Affected: 3.2.0 , < 3.2.532 (custom)
        cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Date Public
    2026-09-09 16:00
    Credits
    Michael Adedeji
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0303",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-10T13:01:15.631812Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-10T13:01:27.361Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Checkov by Prisma Cloud",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "3.2.532",
                  "status": "unaffected"
                }
              ],
              "lessThan": "3.2.532",
              "status": "affected",
              "version": "3.2.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003eNo special configuration is required to be vulnerable to this issue.\u003c/span\u003e"
            }
          ],
          "value": "No special configuration is required to be vulnerable to this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "3.2.532",
                  "versionStartIncluding": "3.2.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Michael Adedeji"
        }
      ],
      "datePublic": "2026-09-09T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA code execution vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.\u0026nbsp;\u003c/p\u003e"
            }
          ],
          "value": "A code execution vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue.\u0026nbsp;"
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-248",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-248 Command Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 2.4,
            "baseSeverity": "LOW",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "PASSIVE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "If the user scans infrastructure as code (IaC) files from untrusted sources."
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-829",
              "description": "CWE-829 Inclusion of Functionality from Untrusted Control Sphere",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-10T06:03:50.513Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0303"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                \u003ctd\u003eCheckov by Prisma Cloud 3.2\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e3.2.0 through 3.2.531\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 3.2.532or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003cbr\u003eCheckov integration in Prisma Cloud is upgraded automatically when new versions become available."
            }
          ],
          "value": "Version\nMinor Version\nSuggested Solution\n\n                                Checkov by Prisma Cloud 3.2\n\n                                3.2.0 through 3.2.531\n                                Upgrade to 3.2.532or later.\n                            \nCheckov integration in Prisma Cloud is upgraded automatically when new versions become available."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-09-09T16:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory."
            }
          ],
          "value": "Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory."
        }
      ],
      "x_affectedList": [
        "Checkov by Prisma Cloud 3.2.0",
        "Checkov by Prisma Cloud 3.2.1",
        "Checkov by Prisma Cloud 3.2.2",
        "Checkov by Prisma Cloud 3.2.3",
        "Checkov by Prisma Cloud 3.2.4",
        "Checkov by Prisma Cloud 3.2.5",
        "Checkov by Prisma Cloud 3.2.6",
        "Checkov by Prisma Cloud 3.2.7",
        "Checkov by Prisma Cloud 3.2.8",
        "Checkov by Prisma Cloud 3.2.9",
        "Checkov by Prisma Cloud 3.2.10",
        "Checkov by Prisma Cloud 3.2.11",
        "Checkov by Prisma Cloud 3.2.12",
        "Checkov by Prisma Cloud 3.2.13",
        "Checkov by Prisma Cloud 3.2.14",
        "Checkov by Prisma Cloud 3.2.15",
        "Checkov by Prisma Cloud 3.2.16",
        "Checkov by Prisma Cloud 3.2.17",
        "Checkov by Prisma Cloud 3.2.18",
        "Checkov by Prisma Cloud 3.2.19",
        "Checkov by Prisma Cloud 3.2.20",
        "Checkov by Prisma Cloud 3.2.21",
        "Checkov by Prisma Cloud 3.2.22",
        "Checkov by Prisma Cloud 3.2.23",
        "Checkov by Prisma Cloud 3.2.24",
        "Checkov by Prisma Cloud 3.2.25",
        "Checkov by Prisma Cloud 3.2.26",
        "Checkov by Prisma Cloud 3.2.27",
        "Checkov by Prisma Cloud 3.2.28",
        "Checkov by Prisma Cloud 3.2.29",
        "Checkov by Prisma Cloud 3.2.30",
        "Checkov by Prisma Cloud 3.2.31",
        "Checkov by Prisma Cloud 3.2.32",
        "Checkov by Prisma Cloud 3.2.33",
        "Checkov by Prisma Cloud 3.2.34",
        "Checkov by Prisma Cloud 3.2.35",
        "Checkov by Prisma Cloud 3.2.36",
        "Checkov by Prisma Cloud 3.2.37",
        "Checkov by Prisma Cloud 3.2.38",
        "Checkov by Prisma Cloud 3.2.39",
        "Checkov by Prisma Cloud 3.2.40",
        "Checkov by Prisma Cloud 3.2.41",
        "Checkov by Prisma Cloud 3.2.42",
        "Checkov by Prisma Cloud 3.2.43",
        "Checkov by Prisma Cloud 3.2.44",
        "Checkov by Prisma Cloud 3.2.45",
        "Checkov by Prisma Cloud 3.2.46",
        "Checkov by Prisma Cloud 3.2.47",
        "Checkov by Prisma Cloud 3.2.48",
        "Checkov by Prisma Cloud 3.2.49",
        "Checkov by Prisma Cloud 3.2.50",
        "Checkov by Prisma Cloud 3.2.51",
        "Checkov by Prisma Cloud 3.2.52",
        "Checkov by Prisma Cloud 3.2.53",
        "Checkov by Prisma Cloud 3.2.54",
        "Checkov by Prisma Cloud 3.2.55",
        "Checkov by Prisma Cloud 3.2.56",
        "Checkov by Prisma Cloud 3.2.57",
        "Checkov by Prisma Cloud 3.2.58",
        "Checkov by Prisma Cloud 3.2.59",
        "Checkov by Prisma Cloud 3.2.60",
        "Checkov by Prisma Cloud 3.2.61",
        "Checkov by Prisma Cloud 3.2.62",
        "Checkov by Prisma Cloud 3.2.63",
        "Checkov by Prisma Cloud 3.2.64",
        "Checkov by Prisma Cloud 3.2.65",
        "Checkov by Prisma Cloud 3.2.66",
        "Checkov by Prisma Cloud 3.2.67",
        "Checkov by Prisma Cloud 3.2.68",
        "Checkov by Prisma Cloud 3.2.69",
        "Checkov by Prisma Cloud 3.2.70",
        "Checkov by Prisma Cloud 3.2.71",
        "Checkov by Prisma Cloud 3.2.72",
        "Checkov by Prisma Cloud 3.2.73",
        "Checkov by Prisma Cloud 3.2.74",
        "Checkov by Prisma Cloud 3.2.75",
        "Checkov by Prisma Cloud 3.2.76",
        "Checkov by Prisma Cloud 3.2.77",
        "Checkov by Prisma Cloud 3.2.78",
        "Checkov by Prisma Cloud 3.2.79",
        "Checkov by Prisma Cloud 3.2.80",
        "Checkov by Prisma Cloud 3.2.81",
        "Checkov by Prisma Cloud 3.2.82",
        "Checkov by Prisma Cloud 3.2.83",
        "Checkov by Prisma Cloud 3.2.84",
        "Checkov by Prisma Cloud 3.2.85",
        "Checkov by Prisma Cloud 3.2.86",
        "Checkov by Prisma Cloud 3.2.87",
        "Checkov by Prisma Cloud 3.2.88",
        "Checkov by Prisma Cloud 3.2.89",
        "Checkov by Prisma Cloud 3.2.90",
        "Checkov by Prisma Cloud 3.2.91",
        "Checkov by Prisma Cloud 3.2.92",
        "Checkov by Prisma Cloud 3.2.93",
        "Checkov by Prisma Cloud 3.2.94",
        "Checkov by Prisma Cloud 3.2.95",
        "Checkov by Prisma Cloud 3.2.96",
        "Checkov by Prisma Cloud 3.2.97",
        "Checkov by Prisma Cloud 3.2.98",
        "Checkov by Prisma Cloud 3.2.99",
        "Checkov by Prisma Cloud 3.2.100",
        "Checkov by Prisma Cloud 3.2.101",
        "Checkov by Prisma Cloud 3.2.102",
        "Checkov by Prisma Cloud 3.2.103",
        "Checkov by Prisma Cloud 3.2.104",
        "Checkov by Prisma Cloud 3.2.105",
        "Checkov by Prisma Cloud 3.2.106",
        "Checkov by Prisma Cloud 3.2.107",
        "Checkov by Prisma Cloud 3.2.108",
        "Checkov by Prisma Cloud 3.2.109",
        "Checkov by Prisma Cloud 3.2.110",
        "Checkov by Prisma Cloud 3.2.111",
        "Checkov by Prisma Cloud 3.2.112",
        "Checkov by Prisma Cloud 3.2.113",
        "Checkov by Prisma Cloud 3.2.114",
        "Checkov by Prisma Cloud 3.2.115",
        "Checkov by Prisma Cloud 3.2.116",
        "Checkov by Prisma Cloud 3.2.117",
        "Checkov by Prisma Cloud 3.2.118",
        "Checkov by Prisma Cloud 3.2.119",
        "Checkov by Prisma Cloud 3.2.120",
        "Checkov by Prisma Cloud 3.2.121",
        "Checkov by Prisma Cloud 3.2.122",
        "Checkov by Prisma Cloud 3.2.123",
        "Checkov by Prisma Cloud 3.2.124",
        "Checkov by Prisma Cloud 3.2.125",
        "Checkov by Prisma Cloud 3.2.126",
        "Checkov by Prisma Cloud 3.2.127",
        "Checkov by Prisma Cloud 3.2.128",
        "Checkov by Prisma Cloud 3.2.129",
        "Checkov by Prisma Cloud 3.2.130",
        "Checkov by Prisma Cloud 3.2.131",
        "Checkov by Prisma Cloud 3.2.132",
        "Checkov by Prisma Cloud 3.2.133",
        "Checkov by Prisma Cloud 3.2.134",
        "Checkov by Prisma Cloud 3.2.135",
        "Checkov by Prisma Cloud 3.2.136",
        "Checkov by Prisma Cloud 3.2.137",
        "Checkov by Prisma Cloud 3.2.138",
        "Checkov by Prisma Cloud 3.2.139",
        "Checkov by Prisma Cloud 3.2.140",
        "Checkov by Prisma Cloud 3.2.141",
        "Checkov by Prisma Cloud 3.2.142",
        "Checkov by Prisma Cloud 3.2.143",
        "Checkov by Prisma Cloud 3.2.144",
        "Checkov by Prisma Cloud 3.2.145",
        "Checkov by Prisma Cloud 3.2.146",
        "Checkov by Prisma Cloud 3.2.147",
        "Checkov by Prisma Cloud 3.2.148",
        "Checkov by Prisma Cloud 3.2.149",
        "Checkov by Prisma Cloud 3.2.150",
        "Checkov by Prisma Cloud 3.2.151",
        "Checkov by Prisma Cloud 3.2.152",
        "Checkov by Prisma Cloud 3.2.153",
        "Checkov by Prisma Cloud 3.2.154",
        "Checkov by Prisma Cloud 3.2.155",
        "Checkov by Prisma Cloud 3.2.156",
        "Checkov by Prisma Cloud 3.2.157",
        "Checkov by Prisma Cloud 3.2.158",
        "Checkov by Prisma Cloud 3.2.159",
        "Checkov by Prisma Cloud 3.2.160",
        "Checkov by Prisma Cloud 3.2.161",
        "Checkov by Prisma Cloud 3.2.162",
        "Checkov by Prisma Cloud 3.2.163",
        "Checkov by Prisma Cloud 3.2.164",
        "Checkov by Prisma Cloud 3.2.165",
        "Checkov by Prisma Cloud 3.2.166",
        "Checkov by Prisma Cloud 3.2.167",
        "Checkov by Prisma Cloud 3.2.168",
        "Checkov by Prisma Cloud 3.2.169",
        "Checkov by Prisma Cloud 3.2.170",
        "Checkov by Prisma Cloud 3.2.171",
        "Checkov by Prisma Cloud 3.2.172",
        "Checkov by Prisma Cloud 3.2.173",
        "Checkov by Prisma Cloud 3.2.174",
        "Checkov by Prisma Cloud 3.2.175",
        "Checkov by Prisma Cloud 3.2.176",
        "Checkov by Prisma Cloud 3.2.177",
        "Checkov by Prisma Cloud 3.2.178",
        "Checkov by Prisma Cloud 3.2.179",
        "Checkov by Prisma Cloud 3.2.180",
        "Checkov by Prisma Cloud 3.2.181",
        "Checkov by Prisma Cloud 3.2.182",
        "Checkov by Prisma Cloud 3.2.183",
        "Checkov by Prisma Cloud 3.2.184",
        "Checkov by Prisma Cloud 3.2.185",
        "Checkov by Prisma Cloud 3.2.186",
        "Checkov by Prisma Cloud 3.2.187",
        "Checkov by Prisma Cloud 3.2.188",
        "Checkov by Prisma Cloud 3.2.189",
        "Checkov by Prisma Cloud 3.2.190",
        "Checkov by Prisma Cloud 3.2.191",
        "Checkov by Prisma Cloud 3.2.192",
        "Checkov by Prisma Cloud 3.2.193",
        "Checkov by Prisma Cloud 3.2.194",
        "Checkov by Prisma Cloud 3.2.195",
        "Checkov by Prisma Cloud 3.2.196",
        "Checkov by Prisma Cloud 3.2.197",
        "Checkov by Prisma Cloud 3.2.198",
        "Checkov by Prisma Cloud 3.2.199",
        "Checkov by Prisma Cloud 3.2.200",
        "Checkov by Prisma Cloud 3.2.201",
        "Checkov by Prisma Cloud 3.2.202",
        "Checkov by Prisma Cloud 3.2.203",
        "Checkov by Prisma Cloud 3.2.204",
        "Checkov by Prisma Cloud 3.2.205",
        "Checkov by Prisma Cloud 3.2.206",
        "Checkov by Prisma Cloud 3.2.207",
        "Checkov by Prisma Cloud 3.2.208",
        "Checkov by Prisma Cloud 3.2.209",
        "Checkov by Prisma Cloud 3.2.210",
        "Checkov by Prisma Cloud 3.2.211",
        "Checkov by Prisma Cloud 3.2.212",
        "Checkov by Prisma Cloud 3.2.213",
        "Checkov by Prisma Cloud 3.2.214",
        "Checkov by Prisma Cloud 3.2.215",
        "Checkov by Prisma Cloud 3.2.216",
        "Checkov by Prisma Cloud 3.2.217",
        "Checkov by Prisma Cloud 3.2.218",
        "Checkov by Prisma Cloud 3.2.219",
        "Checkov by Prisma Cloud 3.2.220",
        "Checkov by Prisma Cloud 3.2.221",
        "Checkov by Prisma Cloud 3.2.222",
        "Checkov by Prisma Cloud 3.2.223",
        "Checkov by Prisma Cloud 3.2.224",
        "Checkov by Prisma Cloud 3.2.225",
        "Checkov by Prisma Cloud 3.2.226",
        "Checkov by Prisma Cloud 3.2.227",
        "Checkov by Prisma Cloud 3.2.228",
        "Checkov by Prisma Cloud 3.2.229",
        "Checkov by Prisma Cloud 3.2.230",
        "Checkov by Prisma Cloud 3.2.231",
        "Checkov by Prisma Cloud 3.2.232",
        "Checkov by Prisma Cloud 3.2.233",
        "Checkov by Prisma Cloud 3.2.234",
        "Checkov by Prisma Cloud 3.2.235",
        "Checkov by Prisma Cloud 3.2.236",
        "Checkov by Prisma Cloud 3.2.237",
        "Checkov by Prisma Cloud 3.2.238",
        "Checkov by Prisma Cloud 3.2.239",
        "Checkov by Prisma Cloud 3.2.240",
        "Checkov by Prisma Cloud 3.2.241",
        "Checkov by Prisma Cloud 3.2.242",
        "Checkov by Prisma Cloud 3.2.243",
        "Checkov by Prisma Cloud 3.2.244",
        "Checkov by Prisma Cloud 3.2.245",
        "Checkov by Prisma Cloud 3.2.246",
        "Checkov by Prisma Cloud 3.2.247",
        "Checkov by Prisma Cloud 3.2.248",
        "Checkov by Prisma Cloud 3.2.249",
        "Checkov by Prisma Cloud 3.2.250",
        "Checkov by Prisma Cloud 3.2.251",
        "Checkov by Prisma Cloud 3.2.252",
        "Checkov by Prisma Cloud 3.2.253",
        "Checkov by Prisma Cloud 3.2.254",
        "Checkov by Prisma Cloud 3.2.255",
        "Checkov by Prisma Cloud 3.2.256",
        "Checkov by Prisma Cloud 3.2.257",
        "Checkov by Prisma Cloud 3.2.258",
        "Checkov by Prisma Cloud 3.2.259",
        "Checkov by Prisma Cloud 3.2.260",
        "Checkov by Prisma Cloud 3.2.261",
        "Checkov by Prisma Cloud 3.2.262",
        "Checkov by Prisma Cloud 3.2.263",
        "Checkov by Prisma Cloud 3.2.264",
        "Checkov by Prisma Cloud 3.2.265",
        "Checkov by Prisma Cloud 3.2.266",
        "Checkov by Prisma Cloud 3.2.267",
        "Checkov by Prisma Cloud 3.2.268",
        "Checkov by Prisma Cloud 3.2.269",
        "Checkov by Prisma Cloud 3.2.270",
        "Checkov by Prisma Cloud 3.2.271",
        "Checkov by Prisma Cloud 3.2.272",
        "Checkov by Prisma Cloud 3.2.273",
        "Checkov by Prisma Cloud 3.2.274",
        "Checkov by Prisma Cloud 3.2.275",
        "Checkov by Prisma Cloud 3.2.276",
        "Checkov by Prisma Cloud 3.2.277",
        "Checkov by Prisma Cloud 3.2.278",
        "Checkov by Prisma Cloud 3.2.279",
        "Checkov by Prisma Cloud 3.2.280",
        "Checkov by Prisma Cloud 3.2.281",
        "Checkov by Prisma Cloud 3.2.282",
        "Checkov by Prisma Cloud 3.2.283",
        "Checkov by Prisma Cloud 3.2.284",
        "Checkov by Prisma Cloud 3.2.285",
        "Checkov by Prisma Cloud 3.2.286",
        "Checkov by Prisma Cloud 3.2.287",
        "Checkov by Prisma Cloud 3.2.288",
        "Checkov by Prisma Cloud 3.2.289",
        "Checkov by Prisma Cloud 3.2.290",
        "Checkov by Prisma Cloud 3.2.291",
        "Checkov by Prisma Cloud 3.2.292",
        "Checkov by Prisma Cloud 3.2.293",
        "Checkov by Prisma Cloud 3.2.294",
        "Checkov by Prisma Cloud 3.2.295",
        "Checkov by Prisma Cloud 3.2.296",
        "Checkov by Prisma Cloud 3.2.297",
        "Checkov by Prisma Cloud 3.2.298",
        "Checkov by Prisma Cloud 3.2.299",
        "Checkov by Prisma Cloud 3.2.300",
        "Checkov by Prisma Cloud 3.2.301",
        "Checkov by Prisma Cloud 3.2.302",
        "Checkov by Prisma Cloud 3.2.303",
        "Checkov by Prisma Cloud 3.2.304",
        "Checkov by Prisma Cloud 3.2.305",
        "Checkov by Prisma Cloud 3.2.306",
        "Checkov by Prisma Cloud 3.2.307",
        "Checkov by Prisma Cloud 3.2.308",
        "Checkov by Prisma Cloud 3.2.309",
        "Checkov by Prisma Cloud 3.2.310",
        "Checkov by Prisma Cloud 3.2.311",
        "Checkov by Prisma Cloud 3.2.312",
        "Checkov by Prisma Cloud 3.2.313",
        "Checkov by Prisma Cloud 3.2.314",
        "Checkov by Prisma Cloud 3.2.315",
        "Checkov by Prisma Cloud 3.2.316",
        "Checkov by Prisma Cloud 3.2.317",
        "Checkov by Prisma Cloud 3.2.318",
        "Checkov by Prisma Cloud 3.2.319",
        "Checkov by Prisma Cloud 3.2.320",
        "Checkov by Prisma Cloud 3.2.321",
        "Checkov by Prisma Cloud 3.2.322",
        "Checkov by Prisma Cloud 3.2.323",
        "Checkov by Prisma Cloud 3.2.324",
        "Checkov by Prisma Cloud 3.2.325",
        "Checkov by Prisma Cloud 3.2.326",
        "Checkov by Prisma Cloud 3.2.327",
        "Checkov by Prisma Cloud 3.2.328",
        "Checkov by Prisma Cloud 3.2.329",
        "Checkov by Prisma Cloud 3.2.330",
        "Checkov by Prisma Cloud 3.2.331",
        "Checkov by Prisma Cloud 3.2.332",
        "Checkov by Prisma Cloud 3.2.333",
        "Checkov by Prisma Cloud 3.2.334",
        "Checkov by Prisma Cloud 3.2.335",
        "Checkov by Prisma Cloud 3.2.336",
        "Checkov by Prisma Cloud 3.2.337",
        "Checkov by Prisma Cloud 3.2.338",
        "Checkov by Prisma Cloud 3.2.339",
        "Checkov by Prisma Cloud 3.2.340",
        "Checkov by Prisma Cloud 3.2.341",
        "Checkov by Prisma Cloud 3.2.342",
        "Checkov by Prisma Cloud 3.2.343",
        "Checkov by Prisma Cloud 3.2.344",
        "Checkov by Prisma Cloud 3.2.345",
        "Checkov by Prisma Cloud 3.2.346",
        "Checkov by Prisma Cloud 3.2.347",
        "Checkov by Prisma Cloud 3.2.348",
        "Checkov by Prisma Cloud 3.2.349",
        "Checkov by Prisma Cloud 3.2.350",
        "Checkov by Prisma Cloud 3.2.351",
        "Checkov by Prisma Cloud 3.2.352",
        "Checkov by Prisma Cloud 3.2.353",
        "Checkov by Prisma Cloud 3.2.354",
        "Checkov by Prisma Cloud 3.2.355",
        "Checkov by Prisma Cloud 3.2.356",
        "Checkov by Prisma Cloud 3.2.357",
        "Checkov by Prisma Cloud 3.2.358",
        "Checkov by Prisma Cloud 3.2.359",
        "Checkov by Prisma Cloud 3.2.360",
        "Checkov by Prisma Cloud 3.2.361",
        "Checkov by Prisma Cloud 3.2.362",
        "Checkov by Prisma Cloud 3.2.363",
        "Checkov by Prisma Cloud 3.2.364",
        "Checkov by Prisma Cloud 3.2.365",
        "Checkov by Prisma Cloud 3.2.366",
        "Checkov by Prisma Cloud 3.2.367",
        "Checkov by Prisma Cloud 3.2.368",
        "Checkov by Prisma Cloud 3.2.369",
        "Checkov by Prisma Cloud 3.2.370",
        "Checkov by Prisma Cloud 3.2.371",
        "Checkov by Prisma Cloud 3.2.372",
        "Checkov by Prisma Cloud 3.2.373",
        "Checkov by Prisma Cloud 3.2.374",
        "Checkov by Prisma Cloud 3.2.375",
        "Checkov by Prisma Cloud 3.2.376",
        "Checkov by Prisma Cloud 3.2.377",
        "Checkov by Prisma Cloud 3.2.378",
        "Checkov by Prisma Cloud 3.2.379",
        "Checkov by Prisma Cloud 3.2.380",
        "Checkov by Prisma Cloud 3.2.381",
        "Checkov by Prisma Cloud 3.2.382",
        "Checkov by Prisma Cloud 3.2.383",
        "Checkov by Prisma Cloud 3.2.384",
        "Checkov by Prisma Cloud 3.2.385",
        "Checkov by Prisma Cloud 3.2.386",
        "Checkov by Prisma Cloud 3.2.387",
        "Checkov by Prisma Cloud 3.2.388",
        "Checkov by Prisma Cloud 3.2.389",
        "Checkov by Prisma Cloud 3.2.390",
        "Checkov by Prisma Cloud 3.2.391",
        "Checkov by Prisma Cloud 3.2.392",
        "Checkov by Prisma Cloud 3.2.393",
        "Checkov by Prisma Cloud 3.2.394",
        "Checkov by Prisma Cloud 3.2.395",
        "Checkov by Prisma Cloud 3.2.396",
        "Checkov by Prisma Cloud 3.2.397",
        "Checkov by Prisma Cloud 3.2.398",
        "Checkov by Prisma Cloud 3.2.399",
        "Checkov by Prisma Cloud 3.2.400",
        "Checkov by Prisma Cloud 3.2.401",
        "Checkov by Prisma Cloud 3.2.402",
        "Checkov by Prisma Cloud 3.2.403",
        "Checkov by Prisma Cloud 3.2.404",
        "Checkov by Prisma Cloud 3.2.405",
        "Checkov by Prisma Cloud 3.2.406",
        "Checkov by Prisma Cloud 3.2.407",
        "Checkov by Prisma Cloud 3.2.408",
        "Checkov by Prisma Cloud 3.2.409",
        "Checkov by Prisma Cloud 3.2.410",
        "Checkov by Prisma Cloud 3.2.411",
        "Checkov by Prisma Cloud 3.2.412",
        "Checkov by Prisma Cloud 3.2.413",
        "Checkov by Prisma Cloud 3.2.414",
        "Checkov by Prisma Cloud 3.2.415",
        "Checkov by Prisma Cloud 3.2.416",
        "Checkov by Prisma Cloud 3.2.417",
        "Checkov by Prisma Cloud 3.2.418",
        "Checkov by Prisma Cloud 3.2.419",
        "Checkov by Prisma Cloud 3.2.420",
        "Checkov by Prisma Cloud 3.2.421",
        "Checkov by Prisma Cloud 3.2.422",
        "Checkov by Prisma Cloud 3.2.423",
        "Checkov by Prisma Cloud 3.2.424",
        "Checkov by Prisma Cloud 3.2.425",
        "Checkov by Prisma Cloud 3.2.426",
        "Checkov by Prisma Cloud 3.2.427",
        "Checkov by Prisma Cloud 3.2.428",
        "Checkov by Prisma Cloud 3.2.429",
        "Checkov by Prisma Cloud 3.2.430",
        "Checkov by Prisma Cloud 3.2.431",
        "Checkov by Prisma Cloud 3.2.432",
        "Checkov by Prisma Cloud 3.2.433",
        "Checkov by Prisma Cloud 3.2.434",
        "Checkov by Prisma Cloud 3.2.435",
        "Checkov by Prisma Cloud 3.2.436",
        "Checkov by Prisma Cloud 3.2.437",
        "Checkov by Prisma Cloud 3.2.438",
        "Checkov by Prisma Cloud 3.2.439",
        "Checkov by Prisma Cloud 3.2.440",
        "Checkov by Prisma Cloud 3.2.441",
        "Checkov by Prisma Cloud 3.2.442",
        "Checkov by Prisma Cloud 3.2.443",
        "Checkov by Prisma Cloud 3.2.444",
        "Checkov by Prisma Cloud 3.2.445",
        "Checkov by Prisma Cloud 3.2.446",
        "Checkov by Prisma Cloud 3.2.447",
        "Checkov by Prisma Cloud 3.2.448",
        "Checkov by Prisma Cloud 3.2.449",
        "Checkov by Prisma Cloud 3.2.450",
        "Checkov by Prisma Cloud 3.2.451",
        "Checkov by Prisma Cloud 3.2.452",
        "Checkov by Prisma Cloud 3.2.453",
        "Checkov by Prisma Cloud 3.2.454",
        "Checkov by Prisma Cloud 3.2.455",
        "Checkov by Prisma Cloud 3.2.456",
        "Checkov by Prisma Cloud 3.2.457",
        "Checkov by Prisma Cloud 3.2.458",
        "Checkov by Prisma Cloud 3.2.459",
        "Checkov by Prisma Cloud 3.2.460",
        "Checkov by Prisma Cloud 3.2.461",
        "Checkov by Prisma Cloud 3.2.462",
        "Checkov by Prisma Cloud 3.2.463",
        "Checkov by Prisma Cloud 3.2.464",
        "Checkov by Prisma Cloud 3.2.465",
        "Checkov by Prisma Cloud 3.2.466",
        "Checkov by Prisma Cloud 3.2.467",
        "Checkov by Prisma Cloud 3.2.468",
        "Checkov by Prisma Cloud 3.2.469",
        "Checkov by Prisma Cloud 3.2.470",
        "Checkov by Prisma Cloud 3.2.471",
        "Checkov by Prisma Cloud 3.2.472",
        "Checkov by Prisma Cloud 3.2.473",
        "Checkov by Prisma Cloud 3.2.474",
        "Checkov by Prisma Cloud 3.2.475",
        "Checkov by Prisma Cloud 3.2.476",
        "Checkov by Prisma Cloud 3.2.477",
        "Checkov by Prisma Cloud 3.2.478",
        "Checkov by Prisma Cloud 3.2.479",
        "Checkov by Prisma Cloud 3.2.480",
        "Checkov by Prisma Cloud 3.2.481",
        "Checkov by Prisma Cloud 3.2.482",
        "Checkov by Prisma Cloud 3.2.483",
        "Checkov by Prisma Cloud 3.2.484",
        "Checkov by Prisma Cloud 3.2.485",
        "Checkov by Prisma Cloud 3.2.486",
        "Checkov by Prisma Cloud 3.2.487",
        "Checkov by Prisma Cloud 3.2.488",
        "Checkov by Prisma Cloud 3.2.489",
        "Checkov by Prisma Cloud 3.2.490",
        "Checkov by Prisma Cloud 3.2.491",
        "Checkov by Prisma Cloud 3.2.492",
        "Checkov by Prisma Cloud 3.2.493",
        "Checkov by Prisma Cloud 3.2.494",
        "Checkov by Prisma Cloud 3.2.495",
        "Checkov by Prisma Cloud 3.2.496",
        "Checkov by Prisma Cloud 3.2.497",
        "Checkov by Prisma Cloud 3.2.498",
        "Checkov by Prisma Cloud 3.2.499",
        "Checkov by Prisma Cloud 3.2.500",
        "Checkov by Prisma Cloud 3.2.501",
        "Checkov by Prisma Cloud 3.2.502",
        "Checkov by Prisma Cloud 3.2.503",
        "Checkov by Prisma Cloud 3.2.504",
        "Checkov by Prisma Cloud 3.2.505",
        "Checkov by Prisma Cloud 3.2.506",
        "Checkov by Prisma Cloud 3.2.507",
        "Checkov by Prisma Cloud 3.2.508",
        "Checkov by Prisma Cloud 3.2.509",
        "Checkov by Prisma Cloud 3.2.510",
        "Checkov by Prisma Cloud 3.2.511",
        "Checkov by Prisma Cloud 3.2.512",
        "Checkov by Prisma Cloud 3.2.513",
        "Checkov by Prisma Cloud 3.2.514",
        "Checkov by Prisma Cloud 3.2.515",
        "Checkov by Prisma Cloud 3.2.516",
        "Checkov by Prisma Cloud 3.2.517",
        "Checkov by Prisma Cloud 3.2.518",
        "Checkov by Prisma Cloud 3.2.519",
        "Checkov by Prisma Cloud 3.2.520",
        "Checkov by Prisma Cloud 3.2.521",
        "Checkov by Prisma Cloud 3.2.522",
        "Checkov by Prisma Cloud 3.2.523",
        "Checkov by Prisma Cloud 3.2.524",
        "Checkov by Prisma Cloud 3.2.525",
        "Checkov by Prisma Cloud 3.2.526",
        "Checkov by Prisma Cloud 3.2.527",
        "Checkov by Prisma Cloud 3.2.528",
        "Checkov by Prisma Cloud 3.2.529",
        "Checkov by Prisma Cloud 3.2.530",
        "Checkov by Prisma Cloud 3.2.531"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0303",
    "datePublished": "2026-09-10T06:03:50.513Z",
    "dateReserved": "2025-11-03T20:45:01.388Z",
    "dateUpdated": "2026-09-10T13:01:27.361Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-45165 (GCVE-0-2026-45165)

    Vulnerability from cvelistv5 – Published: 2026-10-15 19:00 – Updated: 2026-10-15 20:23
    VLAI
    Title
    Idira Secrets Manager (Self-Hosted): Improper Authorization in REST API
    Summary
    An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access controls on the branch or cause a denial of service (DoS). Idira Security Bulletin CA26-38.
    Severity
    8.6 (High)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/S:N/AU:N/R:U/V:D/RE:M/U:Amber
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-15 20:19 UTC
    CWE
    • CWE-863 - (Incorrect Authorization)
    Assigner
    palo_alto CNA under the mitre root
    CNA scorecard A 95/100 over 96 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Palo Alto Networks Idira Secrets Manager (Self-Hosted) Affected: 13.9 , < 13.9.1 (custom)
        cpe:2.3:a:palo_alto_networks:idira_secrets_manager_self-hosted_:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Credits
    George Chen
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-45165",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T20:19:57.634495Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T20:23:40.239Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Idira Secrets Manager (Self-Hosted)",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "13.9.1",
                  "status": "unaffected"
                }
              ],
              "lessThan": "13.9.1",
              "status": "affected",
              "version": "13.9",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:idira_secrets_manager_self-hosted_:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "13.9.1",
                  "versionStartIncluding": "13.9",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "George Chen"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access controls on the branch or cause a denial of service (DoS). Idira Security Bulletin CA26-38."
            }
          ],
          "value": "An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access controls on the branch or cause a denial of service (DoS). Idira Security Bulletin CA26-38."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-180",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-180: Exploiting Incorrectly Configured Access Control Security Levels"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NEGLIGIBLE",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/S:N/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "CWE-863 (Incorrect Authorization)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-15T19:14:04.921Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://docs.cyberark.com/secrets-manager-sh/13.9/en/content/enterprise/releasenotes/release-notes-13.9.1.htm?tocpath=Get%20started%7CRelease%20Notes%7C_____3"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-14T00:10:00.000Z",
          "value": "Initial publication."
        }
      ],
      "title": "Idira Secrets Manager (Self-Hosted): Improper Authorization in REST API",
      "x_affectedList": [
        "Idira Secrets Manager (Self-Hosted) 13.9.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-45165",
    "datePublished": "2026-10-15T19:00:55.521Z",
    "dateReserved": "2026-05-08T23:00:57.502Z",
    "dateUpdated": "2026-10-15T20:23:40.239Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-0311 (GCVE-0-2026-0311)

    Vulnerability from cvelistv5 – Published: 2026-10-14 20:29 – Updated: 2026-10-15 16:43
    VLAI
    Title
    Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability
    Summary
    A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.
    Severity
    1.1 (Low)
    CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:L/SI:L/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-15 16:19 UTC
    CWE
    • CWE-918 - Server-Side Request Forgery (SSRF)
    Assigner
    palo_alto CNA under the mitre root
    CNA scorecard A 95/100 over 96 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Palo Alto Networks Checkov by Prisma Cloud Affected: 0 , < 3.2.533 (custom)
        cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Date Public
    2026-10-14 16:00
    Credits
    Muhammad Ibrahim
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0311",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T16:19:42.105391Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T16:43:45.351Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Checkov by Prisma Cloud",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "3.2.533",
                  "status": "unaffected"
                }
              ],
              "lessThan": "3.2.533",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNo special configuration is required.\u0026nbsp;\u003cbr\u003e\u003c/p\u003e"
            }
          ],
          "value": "No special configuration is required."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "3.2.533",
                  "versionStartIncluding": "3.2.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Muhammad Ibrahim"
        }
      ],
      "datePublic": "2026-10-14T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cspan\u003eA server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.\u003c/span\u003e\u003cbr\u003e\u003c/p\u003e"
            }
          ],
          "value": "A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-664",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-664 Server Side Request Forgery"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 1.1,
            "baseSeverity": "LOW",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "LOW",
            "userInteraction": "PASSIVE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:L/SI:L/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "CWE-918 Server-Side Request Forgery (SSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T20:29:19.297Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "name": "Checkov Security Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0311"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eCheckov by Prisma Cloud\u003c/td\u003e\u003ctd\u003e\u003cspan\u003e3.2.0 through 3.2.532\u003c/span\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to\u0026nbsp;3.2.533\u0026nbsp;or later.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003cbr\u003eCheckov integration in Prisma Cloud is upgraded automatically when new versions become available."
            }
          ],
          "value": "Version\nMinor Version\nSuggested Solution\nCheckov by Prisma Cloud3.2.0 through 3.2.532Upgrade to\u00a03.2.533\u00a0or later.\nCheckov integration in Prisma Cloud is upgraded automatically when new versions become available."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-14T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory."
            }
          ],
          "value": "Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory."
        }
      ],
      "x_affectedList": [
        "Checkov by Prisma Cloud 3.2.0",
        "Checkov by Prisma Cloud 3.2.1",
        "Checkov by Prisma Cloud 3.2.2",
        "Checkov by Prisma Cloud 3.2.3",
        "Checkov by Prisma Cloud 3.2.4",
        "Checkov by Prisma Cloud 3.2.5",
        "Checkov by Prisma Cloud 3.2.6",
        "Checkov by Prisma Cloud 3.2.7",
        "Checkov by Prisma Cloud 3.2.8",
        "Checkov by Prisma Cloud 3.2.9",
        "Checkov by Prisma Cloud 3.2.10",
        "Checkov by Prisma Cloud 3.2.11",
        "Checkov by Prisma Cloud 3.2.12",
        "Checkov by Prisma Cloud 3.2.13",
        "Checkov by Prisma Cloud 3.2.14",
        "Checkov by Prisma Cloud 3.2.15",
        "Checkov by Prisma Cloud 3.2.16",
        "Checkov by Prisma Cloud 3.2.17",
        "Checkov by Prisma Cloud 3.2.18",
        "Checkov by Prisma Cloud 3.2.19",
        "Checkov by Prisma Cloud 3.2.20",
        "Checkov by Prisma Cloud 3.2.21",
        "Checkov by Prisma Cloud 3.2.22",
        "Checkov by Prisma Cloud 3.2.23",
        "Checkov by Prisma Cloud 3.2.24",
        "Checkov by Prisma Cloud 3.2.25",
        "Checkov by Prisma Cloud 3.2.26",
        "Checkov by Prisma Cloud 3.2.27",
        "Checkov by Prisma Cloud 3.2.28",
        "Checkov by Prisma Cloud 3.2.29",
        "Checkov by Prisma Cloud 3.2.30",
        "Checkov by Prisma Cloud 3.2.31",
        "Checkov by Prisma Cloud 3.2.32",
        "Checkov by Prisma Cloud 3.2.33",
        "Checkov by Prisma Cloud 3.2.34",
        "Checkov by Prisma Cloud 3.2.35",
        "Checkov by Prisma Cloud 3.2.36",
        "Checkov by Prisma Cloud 3.2.37",
        "Checkov by Prisma Cloud 3.2.38",
        "Checkov by Prisma Cloud 3.2.39",
        "Checkov by Prisma Cloud 3.2.40",
        "Checkov by Prisma Cloud 3.2.41",
        "Checkov by Prisma Cloud 3.2.42",
        "Checkov by Prisma Cloud 3.2.43",
        "Checkov by Prisma Cloud 3.2.44",
        "Checkov by Prisma Cloud 3.2.45",
        "Checkov by Prisma Cloud 3.2.46",
        "Checkov by Prisma Cloud 3.2.47",
        "Checkov by Prisma Cloud 3.2.48",
        "Checkov by Prisma Cloud 3.2.49",
        "Checkov by Prisma Cloud 3.2.50",
        "Checkov by Prisma Cloud 3.2.51",
        "Checkov by Prisma Cloud 3.2.52",
        "Checkov by Prisma Cloud 3.2.53",
        "Checkov by Prisma Cloud 3.2.54",
        "Checkov by Prisma Cloud 3.2.55",
        "Checkov by Prisma Cloud 3.2.56",
        "Checkov by Prisma Cloud 3.2.57",
        "Checkov by Prisma Cloud 3.2.58",
        "Checkov by Prisma Cloud 3.2.59",
        "Checkov by Prisma Cloud 3.2.60",
        "Checkov by Prisma Cloud 3.2.61",
        "Checkov by Prisma Cloud 3.2.62",
        "Checkov by Prisma Cloud 3.2.63",
        "Checkov by Prisma Cloud 3.2.64",
        "Checkov by Prisma Cloud 3.2.65",
        "Checkov by Prisma Cloud 3.2.66",
        "Checkov by Prisma Cloud 3.2.67",
        "Checkov by Prisma Cloud 3.2.68",
        "Checkov by Prisma Cloud 3.2.69",
        "Checkov by Prisma Cloud 3.2.70",
        "Checkov by Prisma Cloud 3.2.71",
        "Checkov by Prisma Cloud 3.2.72",
        "Checkov by Prisma Cloud 3.2.73",
        "Checkov by Prisma Cloud 3.2.74",
        "Checkov by Prisma Cloud 3.2.75",
        "Checkov by Prisma Cloud 3.2.76",
        "Checkov by Prisma Cloud 3.2.77",
        "Checkov by Prisma Cloud 3.2.78",
        "Checkov by Prisma Cloud 3.2.79",
        "Checkov by Prisma Cloud 3.2.80",
        "Checkov by Prisma Cloud 3.2.81",
        "Checkov by Prisma Cloud 3.2.82",
        "Checkov by Prisma Cloud 3.2.83",
        "Checkov by Prisma Cloud 3.2.84",
        "Checkov by Prisma Cloud 3.2.85",
        "Checkov by Prisma Cloud 3.2.86",
        "Checkov by Prisma Cloud 3.2.87",
        "Checkov by Prisma Cloud 3.2.88",
        "Checkov by Prisma Cloud 3.2.89",
        "Checkov by Prisma Cloud 3.2.90",
        "Checkov by Prisma Cloud 3.2.91",
        "Checkov by Prisma Cloud 3.2.92",
        "Checkov by Prisma Cloud 3.2.93",
        "Checkov by Prisma Cloud 3.2.94",
        "Checkov by Prisma Cloud 3.2.95",
        "Checkov by Prisma Cloud 3.2.96",
        "Checkov by Prisma Cloud 3.2.97",
        "Checkov by Prisma Cloud 3.2.98",
        "Checkov by Prisma Cloud 3.2.99",
        "Checkov by Prisma Cloud 3.2.100",
        "Checkov by Prisma Cloud 3.2.101",
        "Checkov by Prisma Cloud 3.2.102",
        "Checkov by Prisma Cloud 3.2.103",
        "Checkov by Prisma Cloud 3.2.104",
        "Checkov by Prisma Cloud 3.2.105",
        "Checkov by Prisma Cloud 3.2.106",
        "Checkov by Prisma Cloud 3.2.107",
        "Checkov by Prisma Cloud 3.2.108",
        "Checkov by Prisma Cloud 3.2.109",
        "Checkov by Prisma Cloud 3.2.110",
        "Checkov by Prisma Cloud 3.2.111",
        "Checkov by Prisma Cloud 3.2.112",
        "Checkov by Prisma Cloud 3.2.113",
        "Checkov by Prisma Cloud 3.2.114",
        "Checkov by Prisma Cloud 3.2.115",
        "Checkov by Prisma Cloud 3.2.116",
        "Checkov by Prisma Cloud 3.2.117",
        "Checkov by Prisma Cloud 3.2.118",
        "Checkov by Prisma Cloud 3.2.119",
        "Checkov by Prisma Cloud 3.2.120",
        "Checkov by Prisma Cloud 3.2.121",
        "Checkov by Prisma Cloud 3.2.122",
        "Checkov by Prisma Cloud 3.2.123",
        "Checkov by Prisma Cloud 3.2.124",
        "Checkov by Prisma Cloud 3.2.125",
        "Checkov by Prisma Cloud 3.2.126",
        "Checkov by Prisma Cloud 3.2.127",
        "Checkov by Prisma Cloud 3.2.128",
        "Checkov by Prisma Cloud 3.2.129",
        "Checkov by Prisma Cloud 3.2.130",
        "Checkov by Prisma Cloud 3.2.131",
        "Checkov by Prisma Cloud 3.2.132",
        "Checkov by Prisma Cloud 3.2.133",
        "Checkov by Prisma Cloud 3.2.134",
        "Checkov by Prisma Cloud 3.2.135",
        "Checkov by Prisma Cloud 3.2.136",
        "Checkov by Prisma Cloud 3.2.137",
        "Checkov by Prisma Cloud 3.2.138",
        "Checkov by Prisma Cloud 3.2.139",
        "Checkov by Prisma Cloud 3.2.140",
        "Checkov by Prisma Cloud 3.2.141",
        "Checkov by Prisma Cloud 3.2.142",
        "Checkov by Prisma Cloud 3.2.143",
        "Checkov by Prisma Cloud 3.2.144",
        "Checkov by Prisma Cloud 3.2.145",
        "Checkov by Prisma Cloud 3.2.146",
        "Checkov by Prisma Cloud 3.2.147",
        "Checkov by Prisma Cloud 3.2.148",
        "Checkov by Prisma Cloud 3.2.149",
        "Checkov by Prisma Cloud 3.2.150",
        "Checkov by Prisma Cloud 3.2.151",
        "Checkov by Prisma Cloud 3.2.152",
        "Checkov by Prisma Cloud 3.2.153",
        "Checkov by Prisma Cloud 3.2.154",
        "Checkov by Prisma Cloud 3.2.155",
        "Checkov by Prisma Cloud 3.2.156",
        "Checkov by Prisma Cloud 3.2.157",
        "Checkov by Prisma Cloud 3.2.158",
        "Checkov by Prisma Cloud 3.2.159",
        "Checkov by Prisma Cloud 3.2.160",
        "Checkov by Prisma Cloud 3.2.161",
        "Checkov by Prisma Cloud 3.2.162",
        "Checkov by Prisma Cloud 3.2.163",
        "Checkov by Prisma Cloud 3.2.164",
        "Checkov by Prisma Cloud 3.2.165",
        "Checkov by Prisma Cloud 3.2.166",
        "Checkov by Prisma Cloud 3.2.167",
        "Checkov by Prisma Cloud 3.2.168",
        "Checkov by Prisma Cloud 3.2.169",
        "Checkov by Prisma Cloud 3.2.170",
        "Checkov by Prisma Cloud 3.2.171",
        "Checkov by Prisma Cloud 3.2.172",
        "Checkov by Prisma Cloud 3.2.173",
        "Checkov by Prisma Cloud 3.2.174",
        "Checkov by Prisma Cloud 3.2.175",
        "Checkov by Prisma Cloud 3.2.176",
        "Checkov by Prisma Cloud 3.2.177",
        "Checkov by Prisma Cloud 3.2.178",
        "Checkov by Prisma Cloud 3.2.179",
        "Checkov by Prisma Cloud 3.2.180",
        "Checkov by Prisma Cloud 3.2.181",
        "Checkov by Prisma Cloud 3.2.182",
        "Checkov by Prisma Cloud 3.2.183",
        "Checkov by Prisma Cloud 3.2.184",
        "Checkov by Prisma Cloud 3.2.185",
        "Checkov by Prisma Cloud 3.2.186",
        "Checkov by Prisma Cloud 3.2.187",
        "Checkov by Prisma Cloud 3.2.188",
        "Checkov by Prisma Cloud 3.2.189",
        "Checkov by Prisma Cloud 3.2.190",
        "Checkov by Prisma Cloud 3.2.191",
        "Checkov by Prisma Cloud 3.2.192",
        "Checkov by Prisma Cloud 3.2.193",
        "Checkov by Prisma Cloud 3.2.194",
        "Checkov by Prisma Cloud 3.2.195",
        "Checkov by Prisma Cloud 3.2.196",
        "Checkov by Prisma Cloud 3.2.197",
        "Checkov by Prisma Cloud 3.2.198",
        "Checkov by Prisma Cloud 3.2.199",
        "Checkov by Prisma Cloud 3.2.200",
        "Checkov by Prisma Cloud 3.2.201",
        "Checkov by Prisma Cloud 3.2.202",
        "Checkov by Prisma Cloud 3.2.203",
        "Checkov by Prisma Cloud 3.2.204",
        "Checkov by Prisma Cloud 3.2.205",
        "Checkov by Prisma Cloud 3.2.206",
        "Checkov by Prisma Cloud 3.2.207",
        "Checkov by Prisma Cloud 3.2.208",
        "Checkov by Prisma Cloud 3.2.209",
        "Checkov by Prisma Cloud 3.2.210",
        "Checkov by Prisma Cloud 3.2.211",
        "Checkov by Prisma Cloud 3.2.212",
        "Checkov by Prisma Cloud 3.2.213",
        "Checkov by Prisma Cloud 3.2.214",
        "Checkov by Prisma Cloud 3.2.215",
        "Checkov by Prisma Cloud 3.2.216",
        "Checkov by Prisma Cloud 3.2.217",
        "Checkov by Prisma Cloud 3.2.218",
        "Checkov by Prisma Cloud 3.2.219",
        "Checkov by Prisma Cloud 3.2.220",
        "Checkov by Prisma Cloud 3.2.221",
        "Checkov by Prisma Cloud 3.2.222",
        "Checkov by Prisma Cloud 3.2.223",
        "Checkov by Prisma Cloud 3.2.224",
        "Checkov by Prisma Cloud 3.2.225",
        "Checkov by Prisma Cloud 3.2.226",
        "Checkov by Prisma Cloud 3.2.227",
        "Checkov by Prisma Cloud 3.2.228",
        "Checkov by Prisma Cloud 3.2.229",
        "Checkov by Prisma Cloud 3.2.230",
        "Checkov by Prisma Cloud 3.2.231",
        "Checkov by Prisma Cloud 3.2.232",
        "Checkov by Prisma Cloud 3.2.233",
        "Checkov by Prisma Cloud 3.2.234",
        "Checkov by Prisma Cloud 3.2.235",
        "Checkov by Prisma Cloud 3.2.236",
        "Checkov by Prisma Cloud 3.2.237",
        "Checkov by Prisma Cloud 3.2.238",
        "Checkov by Prisma Cloud 3.2.239",
        "Checkov by Prisma Cloud 3.2.240",
        "Checkov by Prisma Cloud 3.2.241",
        "Checkov by Prisma Cloud 3.2.242",
        "Checkov by Prisma Cloud 3.2.243",
        "Checkov by Prisma Cloud 3.2.244",
        "Checkov by Prisma Cloud 3.2.245",
        "Checkov by Prisma Cloud 3.2.246",
        "Checkov by Prisma Cloud 3.2.247",
        "Checkov by Prisma Cloud 3.2.248",
        "Checkov by Prisma Cloud 3.2.249",
        "Checkov by Prisma Cloud 3.2.250",
        "Checkov by Prisma Cloud 3.2.251",
        "Checkov by Prisma Cloud 3.2.252",
        "Checkov by Prisma Cloud 3.2.253",
        "Checkov by Prisma Cloud 3.2.254",
        "Checkov by Prisma Cloud 3.2.255",
        "Checkov by Prisma Cloud 3.2.256",
        "Checkov by Prisma Cloud 3.2.257",
        "Checkov by Prisma Cloud 3.2.258",
        "Checkov by Prisma Cloud 3.2.259",
        "Checkov by Prisma Cloud 3.2.260",
        "Checkov by Prisma Cloud 3.2.261",
        "Checkov by Prisma Cloud 3.2.262",
        "Checkov by Prisma Cloud 3.2.263",
        "Checkov by Prisma Cloud 3.2.264",
        "Checkov by Prisma Cloud 3.2.265",
        "Checkov by Prisma Cloud 3.2.266",
        "Checkov by Prisma Cloud 3.2.267",
        "Checkov by Prisma Cloud 3.2.268",
        "Checkov by Prisma Cloud 3.2.269",
        "Checkov by Prisma Cloud 3.2.270",
        "Checkov by Prisma Cloud 3.2.271",
        "Checkov by Prisma Cloud 3.2.272",
        "Checkov by Prisma Cloud 3.2.273",
        "Checkov by Prisma Cloud 3.2.274",
        "Checkov by Prisma Cloud 3.2.275",
        "Checkov by Prisma Cloud 3.2.276",
        "Checkov by Prisma Cloud 3.2.277",
        "Checkov by Prisma Cloud 3.2.278",
        "Checkov by Prisma Cloud 3.2.279",
        "Checkov by Prisma Cloud 3.2.280",
        "Checkov by Prisma Cloud 3.2.281",
        "Checkov by Prisma Cloud 3.2.282",
        "Checkov by Prisma Cloud 3.2.283",
        "Checkov by Prisma Cloud 3.2.284",
        "Checkov by Prisma Cloud 3.2.285",
        "Checkov by Prisma Cloud 3.2.286",
        "Checkov by Prisma Cloud 3.2.287",
        "Checkov by Prisma Cloud 3.2.288",
        "Checkov by Prisma Cloud 3.2.289",
        "Checkov by Prisma Cloud 3.2.290",
        "Checkov by Prisma Cloud 3.2.291",
        "Checkov by Prisma Cloud 3.2.292",
        "Checkov by Prisma Cloud 3.2.293",
        "Checkov by Prisma Cloud 3.2.294",
        "Checkov by Prisma Cloud 3.2.295",
        "Checkov by Prisma Cloud 3.2.296",
        "Checkov by Prisma Cloud 3.2.297",
        "Checkov by Prisma Cloud 3.2.298",
        "Checkov by Prisma Cloud 3.2.299",
        "Checkov by Prisma Cloud 3.2.300",
        "Checkov by Prisma Cloud 3.2.301",
        "Checkov by Prisma Cloud 3.2.302",
        "Checkov by Prisma Cloud 3.2.303",
        "Checkov by Prisma Cloud 3.2.304",
        "Checkov by Prisma Cloud 3.2.305",
        "Checkov by Prisma Cloud 3.2.306",
        "Checkov by Prisma Cloud 3.2.307",
        "Checkov by Prisma Cloud 3.2.308",
        "Checkov by Prisma Cloud 3.2.309",
        "Checkov by Prisma Cloud 3.2.310",
        "Checkov by Prisma Cloud 3.2.311",
        "Checkov by Prisma Cloud 3.2.312",
        "Checkov by Prisma Cloud 3.2.313",
        "Checkov by Prisma Cloud 3.2.314",
        "Checkov by Prisma Cloud 3.2.315",
        "Checkov by Prisma Cloud 3.2.316",
        "Checkov by Prisma Cloud 3.2.317",
        "Checkov by Prisma Cloud 3.2.318",
        "Checkov by Prisma Cloud 3.2.319",
        "Checkov by Prisma Cloud 3.2.320",
        "Checkov by Prisma Cloud 3.2.321",
        "Checkov by Prisma Cloud 3.2.322",
        "Checkov by Prisma Cloud 3.2.323",
        "Checkov by Prisma Cloud 3.2.324",
        "Checkov by Prisma Cloud 3.2.325",
        "Checkov by Prisma Cloud 3.2.326",
        "Checkov by Prisma Cloud 3.2.327",
        "Checkov by Prisma Cloud 3.2.328",
        "Checkov by Prisma Cloud 3.2.329",
        "Checkov by Prisma Cloud 3.2.330",
        "Checkov by Prisma Cloud 3.2.331",
        "Checkov by Prisma Cloud 3.2.332",
        "Checkov by Prisma Cloud 3.2.333",
        "Checkov by Prisma Cloud 3.2.334",
        "Checkov by Prisma Cloud 3.2.335",
        "Checkov by Prisma Cloud 3.2.336",
        "Checkov by Prisma Cloud 3.2.337",
        "Checkov by Prisma Cloud 3.2.338",
        "Checkov by Prisma Cloud 3.2.339",
        "Checkov by Prisma Cloud 3.2.340",
        "Checkov by Prisma Cloud 3.2.341",
        "Checkov by Prisma Cloud 3.2.342",
        "Checkov by Prisma Cloud 3.2.343",
        "Checkov by Prisma Cloud 3.2.344",
        "Checkov by Prisma Cloud 3.2.345",
        "Checkov by Prisma Cloud 3.2.346",
        "Checkov by Prisma Cloud 3.2.347",
        "Checkov by Prisma Cloud 3.2.348",
        "Checkov by Prisma Cloud 3.2.349",
        "Checkov by Prisma Cloud 3.2.350",
        "Checkov by Prisma Cloud 3.2.351",
        "Checkov by Prisma Cloud 3.2.352",
        "Checkov by Prisma Cloud 3.2.353",
        "Checkov by Prisma Cloud 3.2.354",
        "Checkov by Prisma Cloud 3.2.355",
        "Checkov by Prisma Cloud 3.2.356",
        "Checkov by Prisma Cloud 3.2.357",
        "Checkov by Prisma Cloud 3.2.358",
        "Checkov by Prisma Cloud 3.2.359",
        "Checkov by Prisma Cloud 3.2.360",
        "Checkov by Prisma Cloud 3.2.361",
        "Checkov by Prisma Cloud 3.2.362",
        "Checkov by Prisma Cloud 3.2.363",
        "Checkov by Prisma Cloud 3.2.364",
        "Checkov by Prisma Cloud 3.2.365",
        "Checkov by Prisma Cloud 3.2.366",
        "Checkov by Prisma Cloud 3.2.367",
        "Checkov by Prisma Cloud 3.2.368",
        "Checkov by Prisma Cloud 3.2.369",
        "Checkov by Prisma Cloud 3.2.370",
        "Checkov by Prisma Cloud 3.2.371",
        "Checkov by Prisma Cloud 3.2.372",
        "Checkov by Prisma Cloud 3.2.373",
        "Checkov by Prisma Cloud 3.2.374",
        "Checkov by Prisma Cloud 3.2.375",
        "Checkov by Prisma Cloud 3.2.376",
        "Checkov by Prisma Cloud 3.2.377",
        "Checkov by Prisma Cloud 3.2.378",
        "Checkov by Prisma Cloud 3.2.379",
        "Checkov by Prisma Cloud 3.2.380",
        "Checkov by Prisma Cloud 3.2.381",
        "Checkov by Prisma Cloud 3.2.382",
        "Checkov by Prisma Cloud 3.2.383",
        "Checkov by Prisma Cloud 3.2.384",
        "Checkov by Prisma Cloud 3.2.385",
        "Checkov by Prisma Cloud 3.2.386",
        "Checkov by Prisma Cloud 3.2.387",
        "Checkov by Prisma Cloud 3.2.388",
        "Checkov by Prisma Cloud 3.2.389",
        "Checkov by Prisma Cloud 3.2.390",
        "Checkov by Prisma Cloud 3.2.391",
        "Checkov by Prisma Cloud 3.2.392",
        "Checkov by Prisma Cloud 3.2.393",
        "Checkov by Prisma Cloud 3.2.394",
        "Checkov by Prisma Cloud 3.2.395",
        "Checkov by Prisma Cloud 3.2.396",
        "Checkov by Prisma Cloud 3.2.397",
        "Checkov by Prisma Cloud 3.2.398",
        "Checkov by Prisma Cloud 3.2.399",
        "Checkov by Prisma Cloud 3.2.400",
        "Checkov by Prisma Cloud 3.2.401",
        "Checkov by Prisma Cloud 3.2.402",
        "Checkov by Prisma Cloud 3.2.403",
        "Checkov by Prisma Cloud 3.2.404",
        "Checkov by Prisma Cloud 3.2.405",
        "Checkov by Prisma Cloud 3.2.406",
        "Checkov by Prisma Cloud 3.2.407",
        "Checkov by Prisma Cloud 3.2.408",
        "Checkov by Prisma Cloud 3.2.409",
        "Checkov by Prisma Cloud 3.2.410",
        "Checkov by Prisma Cloud 3.2.411",
        "Checkov by Prisma Cloud 3.2.412",
        "Checkov by Prisma Cloud 3.2.413",
        "Checkov by Prisma Cloud 3.2.414",
        "Checkov by Prisma Cloud 3.2.415",
        "Checkov by Prisma Cloud 3.2.416",
        "Checkov by Prisma Cloud 3.2.417",
        "Checkov by Prisma Cloud 3.2.418",
        "Checkov by Prisma Cloud 3.2.419",
        "Checkov by Prisma Cloud 3.2.420",
        "Checkov by Prisma Cloud 3.2.421",
        "Checkov by Prisma Cloud 3.2.422",
        "Checkov by Prisma Cloud 3.2.423",
        "Checkov by Prisma Cloud 3.2.424",
        "Checkov by Prisma Cloud 3.2.425",
        "Checkov by Prisma Cloud 3.2.426",
        "Checkov by Prisma Cloud 3.2.427",
        "Checkov by Prisma Cloud 3.2.428",
        "Checkov by Prisma Cloud 3.2.429",
        "Checkov by Prisma Cloud 3.2.430",
        "Checkov by Prisma Cloud 3.2.431",
        "Checkov by Prisma Cloud 3.2.432",
        "Checkov by Prisma Cloud 3.2.433",
        "Checkov by Prisma Cloud 3.2.434",
        "Checkov by Prisma Cloud 3.2.435",
        "Checkov by Prisma Cloud 3.2.436",
        "Checkov by Prisma Cloud 3.2.437",
        "Checkov by Prisma Cloud 3.2.438",
        "Checkov by Prisma Cloud 3.2.439",
        "Checkov by Prisma Cloud 3.2.440",
        "Checkov by Prisma Cloud 3.2.441",
        "Checkov by Prisma Cloud 3.2.442",
        "Checkov by Prisma Cloud 3.2.443",
        "Checkov by Prisma Cloud 3.2.444",
        "Checkov by Prisma Cloud 3.2.445",
        "Checkov by Prisma Cloud 3.2.446",
        "Checkov by Prisma Cloud 3.2.447",
        "Checkov by Prisma Cloud 3.2.448",
        "Checkov by Prisma Cloud 3.2.449",
        "Checkov by Prisma Cloud 3.2.450",
        "Checkov by Prisma Cloud 3.2.451",
        "Checkov by Prisma Cloud 3.2.452",
        "Checkov by Prisma Cloud 3.2.453",
        "Checkov by Prisma Cloud 3.2.454",
        "Checkov by Prisma Cloud 3.2.455",
        "Checkov by Prisma Cloud 3.2.456",
        "Checkov by Prisma Cloud 3.2.457",
        "Checkov by Prisma Cloud 3.2.458",
        "Checkov by Prisma Cloud 3.2.459",
        "Checkov by Prisma Cloud 3.2.460",
        "Checkov by Prisma Cloud 3.2.461",
        "Checkov by Prisma Cloud 3.2.462",
        "Checkov by Prisma Cloud 3.2.463",
        "Checkov by Prisma Cloud 3.2.464",
        "Checkov by Prisma Cloud 3.2.465",
        "Checkov by Prisma Cloud 3.2.466",
        "Checkov by Prisma Cloud 3.2.467",
        "Checkov by Prisma Cloud 3.2.468",
        "Checkov by Prisma Cloud 3.2.469",
        "Checkov by Prisma Cloud 3.2.470",
        "Checkov by Prisma Cloud 3.2.471",
        "Checkov by Prisma Cloud 3.2.472",
        "Checkov by Prisma Cloud 3.2.473",
        "Checkov by Prisma Cloud 3.2.474",
        "Checkov by Prisma Cloud 3.2.475",
        "Checkov by Prisma Cloud 3.2.476",
        "Checkov by Prisma Cloud 3.2.477",
        "Checkov by Prisma Cloud 3.2.478",
        "Checkov by Prisma Cloud 3.2.479",
        "Checkov by Prisma Cloud 3.2.480",
        "Checkov by Prisma Cloud 3.2.481",
        "Checkov by Prisma Cloud 3.2.482",
        "Checkov by Prisma Cloud 3.2.483",
        "Checkov by Prisma Cloud 3.2.484",
        "Checkov by Prisma Cloud 3.2.485",
        "Checkov by Prisma Cloud 3.2.486",
        "Checkov by Prisma Cloud 3.2.487",
        "Checkov by Prisma Cloud 3.2.488",
        "Checkov by Prisma Cloud 3.2.489",
        "Checkov by Prisma Cloud 3.2.490",
        "Checkov by Prisma Cloud 3.2.491",
        "Checkov by Prisma Cloud 3.2.492",
        "Checkov by Prisma Cloud 3.2.493",
        "Checkov by Prisma Cloud 3.2.494",
        "Checkov by Prisma Cloud 3.2.495",
        "Checkov by Prisma Cloud 3.2.496",
        "Checkov by Prisma Cloud 3.2.497",
        "Checkov by Prisma Cloud 3.2.498",
        "Checkov by Prisma Cloud 3.2.499",
        "Checkov by Prisma Cloud 3.2.500",
        "Checkov by Prisma Cloud 3.2.501",
        "Checkov by Prisma Cloud 3.2.502",
        "Checkov by Prisma Cloud 3.2.503",
        "Checkov by Prisma Cloud 3.2.504",
        "Checkov by Prisma Cloud 3.2.505",
        "Checkov by Prisma Cloud 3.2.506",
        "Checkov by Prisma Cloud 3.2.507",
        "Checkov by Prisma Cloud 3.2.508",
        "Checkov by Prisma Cloud 3.2.509",
        "Checkov by Prisma Cloud 3.2.510",
        "Checkov by Prisma Cloud 3.2.511",
        "Checkov by Prisma Cloud 3.2.512",
        "Checkov by Prisma Cloud 3.2.513",
        "Checkov by Prisma Cloud 3.2.514",
        "Checkov by Prisma Cloud 3.2.515",
        "Checkov by Prisma Cloud 3.2.516",
        "Checkov by Prisma Cloud 3.2.517",
        "Checkov by Prisma Cloud 3.2.518",
        "Checkov by Prisma Cloud 3.2.519",
        "Checkov by Prisma Cloud 3.2.520",
        "Checkov by Prisma Cloud 3.2.521",
        "Checkov by Prisma Cloud 3.2.522",
        "Checkov by Prisma Cloud 3.2.523",
        "Checkov by Prisma Cloud 3.2.524",
        "Checkov by Prisma Cloud 3.2.525",
        "Checkov by Prisma Cloud 3.2.526",
        "Checkov by Prisma Cloud 3.2.527",
        "Checkov by Prisma Cloud 3.2.528",
        "Checkov by Prisma Cloud 3.2.529",
        "Checkov by Prisma Cloud 3.2.530",
        "Checkov by Prisma Cloud 3.2.531",
        "Checkov by Prisma Cloud 3.2.532"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0311",
    "datePublished": "2026-10-14T20:29:19.297Z",
    "dateReserved": "2025-11-03T20:45:09.854Z",
    "dateUpdated": "2026-10-15T16:43:45.351Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-0312 (GCVE-0-2026-0312)

    Vulnerability from cvelistv5 – Published: 2026-10-14 20:28 – Updated: 2026-10-15 18:40
    VLAI
    Title
    Checkov by Prisma Cloud: Path Traversal Vulnerabilities
    Summary
    Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem.
    Severity
    4.3 (Medium)
    CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-15 18:40 UTC
    CWE
    • CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
    Assigner
    palo_alto CNA under the mitre root
    CNA scorecard A 95/100 over 96 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Palo Alto Networks Checkov by Prisma Cloud Affected: 0 , < 3.3.25 (custom)
        cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Date Public
    2026-10-14 16:00
    Credits
    Muhammad Ibrahim Yuze Pan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0312",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T18:40:14.862502Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T18:40:29.605Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Checkov by Prisma Cloud",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "3.3.25",
                  "status": "unaffected"
                }
              ],
              "lessThan": "3.3.25",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "3.3.25",
                  "versionStartIncluding": "3.3.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Muhammad Ibrahim"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Yuze Pan"
        }
      ],
      "datePublic": "2026-10-14T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003ePath traversal vulnerabilities in Palo Alto Networks Checkov by Prisma\u00ae Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem.\u003c/span\u003e"
            }
          ],
          "value": "Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma\u00ae Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of these issues."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of these issues."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-126",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-126 Path Traversal"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T20:28:18.276Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "name": "Checkov Security Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0312"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eCheckov by Prisma Cloud 3.3\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e3.2.0 through 3.3.24\u003c/td\u003e\u003ctd\u003eUpgrade to 3.3.25 or later.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003cbr\u003eCheckov integration in Prisma Cloud is upgraded automatically when new versions become available."
            }
          ],
          "value": "Version\nMinor Version\nSuggested Solution\nCheckov by Prisma Cloud 3.3\n3.2.0 through 3.3.24Upgrade to 3.3.25 or later.\nCheckov integration in Prisma Cloud is upgraded automatically when new versions become available."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-14T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "Checkov by Prisma Cloud: Path Traversal Vulnerabilities",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cspan\u003eUntil a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory.\u003c/span\u003e\u003cbr\u003e\u003c/p\u003e"
            }
          ],
          "value": "Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory."
        }
      ],
      "x_affectedList": [
        "Checkov by Prisma Cloud 3.3.0",
        "Checkov by Prisma Cloud 3.3.1",
        "Checkov by Prisma Cloud 3.3.2",
        "Checkov by Prisma Cloud 3.3.3",
        "Checkov by Prisma Cloud 3.3.4",
        "Checkov by Prisma Cloud 3.3.5",
        "Checkov by Prisma Cloud 3.3.6",
        "Checkov by Prisma Cloud 3.3.7",
        "Checkov by Prisma Cloud 3.3.8",
        "Checkov by Prisma Cloud 3.3.9",
        "Checkov by Prisma Cloud 3.3.10",
        "Checkov by Prisma Cloud 3.3.11",
        "Checkov by Prisma Cloud 3.3.12",
        "Checkov by Prisma Cloud 3.3.13",
        "Checkov by Prisma Cloud 3.3.14",
        "Checkov by Prisma Cloud 3.3.15",
        "Checkov by Prisma Cloud 3.3.16",
        "Checkov by Prisma Cloud 3.3.17",
        "Checkov by Prisma Cloud 3.3.18",
        "Checkov by Prisma Cloud 3.3.19",
        "Checkov by Prisma Cloud 3.3.20",
        "Checkov by Prisma Cloud 3.3.21",
        "Checkov by Prisma Cloud 3.3.22",
        "Checkov by Prisma Cloud 3.3.23",
        "Checkov by Prisma Cloud 3.3.24"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0312",
    "datePublished": "2026-10-14T20:28:18.276Z",
    "dateReserved": "2025-11-03T20:45:11.196Z",
    "dateUpdated": "2026-10-15T18:40:29.605Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-0313 (GCVE-0-2026-0313)

    Vulnerability from cvelistv5 – Published: 2026-10-14 20:27 – Updated: 2026-10-16 03:56
    VLAI
    Title
    Cortex XSOAR: OS Command Injection Vulnerability
    Summary
    A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints.
    Severity
    6.1 (Medium)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-15 00:00 UTC
    CWE
    • CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
    Assigner
    palo_alto CNA under the mitre root
    CNA scorecard A 95/100 over 96 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Palo Alto Networks Cortex XSOAR OS Query Affected: 0 , < 1.0.17 (custom)
        cpe:2.3:a:palo_alto_networks:cortex_xsoar_os_query:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Palo Alto Networks Cortex XSIAM OS Query Affected: 0 , < 1.0.17 (custom)
        cpe:2.3:a:palo_alto_networks:cortex_xsiam_os_query:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Date Public
    2026-10-14 16:00
    Credits
    Mohamed Lemine Ahmed Jidou (AegisSec)
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0313",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-16T03:56:57.198Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Cortex XSOAR OS Query",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "1.0.17",
                  "status": "unaffected"
                }
              ],
              "lessThan": "1.0.17",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Cortex XSIAM OS Query",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "1.0.17",
                  "status": "unaffected"
                }
              ],
              "lessThan": "1.0.17",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "This issue requires the OS Query content pack and the SSH integration to be installed and configured in Cortex XSOAR or Cortex XSIAM."
            }
          ],
          "value": "This issue requires the OS Query content pack and the SSH integration to be installed and configured in Cortex XSOAR or Cortex XSIAM."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:cortex_xsoar_os_query:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "1.0.17",
                  "versionStartIncluding": "1.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:cortex_xsiam_os_query:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "1.0.17",
                  "versionStartIncluding": "1.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Mohamed Lemine Ahmed Jidou (AegisSec)"
        }
      ],
      "datePublic": "2026-10-14T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints.\u003c/p\u003e"
            }
          ],
          "value": "A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-88",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-88 OS Command Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T20:27:19.112Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "name": "PAN-OS Security Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0313"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003c/th\u003e\u003cth\u003eMinor Version\u003c/th\u003e\u003cth\u003eSuggested Solution\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eCortex XSOAR\u0026nbsp;OS Query\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eUpdate to 1.0.17 or later from the Cortex XSOAR Marketplace.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eCortex XSIAM OS Query\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eUpdate to 1.0.17 or later from the Cortex XSOAR Marketplace.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VersionMinor VersionSuggested SolutionCortex XSOAR\u00a0OS QueryUpdate to 1.0.17 or later from the Cortex XSOAR Marketplace.Cortex XSIAM OS Query\u00a0Update to 1.0.17 or later from the Cortex XSOAR Marketplace."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-14T16:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "Cortex XSOAR: OS Command Injection Vulnerability",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Customers who are unable to upgrade immediately can mitigate this issue by disabling the OSQueryBasicQuery automation in Cortex XSOAR or Cortex XSIAM."
            }
          ],
          "value": "Customers who are unable to upgrade immediately can mitigate this issue by disabling the OSQueryBasicQuery automation in Cortex XSOAR or Cortex XSIAM."
        }
      ],
      "x_affectedList": [
        "Cortex XSOAR OS Query 1.0.0",
        "Cortex XSOAR OS Query 1.0.1",
        "Cortex XSOAR OS Query 1.0.2",
        "Cortex XSOAR OS Query 1.0.3",
        "Cortex XSOAR OS Query 1.0.4",
        "Cortex XSOAR OS Query 1.0.5",
        "Cortex XSOAR OS Query 1.0.6",
        "Cortex XSOAR OS Query 1.0.7",
        "Cortex XSOAR OS Query 1.0.8",
        "Cortex XSOAR OS Query 1.0.9",
        "Cortex XSOAR OS Query 1.0.10",
        "Cortex XSOAR OS Query 1.0.11",
        "Cortex XSOAR OS Query 1.0.12",
        "Cortex XSOAR OS Query 1.0.13",
        "Cortex XSOAR OS Query 1.0.14",
        "Cortex XSOAR OS Query 1.0.15",
        "Cortex XSOAR OS Query 1.0.16",
        "Cortex XSIAM OS Query 1.0.0",
        "Cortex XSIAM OS Query 1.0.1",
        "Cortex XSIAM OS Query 1.0.2",
        "Cortex XSIAM OS Query 1.0.3",
        "Cortex XSIAM OS Query 1.0.4",
        "Cortex XSIAM OS Query 1.0.5",
        "Cortex XSIAM OS Query 1.0.6",
        "Cortex XSIAM OS Query 1.0.7",
        "Cortex XSIAM OS Query 1.0.8",
        "Cortex XSIAM OS Query 1.0.9",
        "Cortex XSIAM OS Query 1.0.10",
        "Cortex XSIAM OS Query 1.0.11",
        "Cortex XSIAM OS Query 1.0.12",
        "Cortex XSIAM OS Query 1.0.13",
        "Cortex XSIAM OS Query 1.0.14",
        "Cortex XSIAM OS Query 1.0.15",
        "Cortex XSIAM OS Query 1.0.16"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0313",
    "datePublished": "2026-10-14T20:27:19.112Z",
    "dateReserved": "2025-11-03T20:45:12.007Z",
    "dateUpdated": "2026-10-16T03:56:57.198Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-0314 (GCVE-0-2026-0314)

    Vulnerability from cvelistv5 – Published: 2026-10-14 20:25 – Updated: 2026-10-15 18:41
    VLAI
    Title
    GlobalProtect App: Local Denial of Service (DoS) on Windows
    Summary
    A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition. The GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability.
    Severity
    4.3 (Medium)
    CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-15 18:41 UTC
    CWE
    • CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')
    Assigner
    palo_alto CNA under the mitre root
    CNA scorecard A 95/100 over 96 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Palo Alto Networks GlobalProtect App Affected: 6.3.0 , < 6.3.3-h16 (custom)
    Affected: 6.2.0 , < 6.2.8-h15 (custom)
    Affected: 6.0.0 , < 6.0.15 (custom)
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*
    		Create a notification for this product.
    Palo Alto Networks GlobalProtect App Unaffected: All , < 12.2.4 (custom)
    		Create a notification for this product.
    Date Public
    2026-10-14 16:00
    Credits
    Artemy Tsetsersky an internal security researcher
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0314",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T18:41:42.318399Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T18:41:54.691Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h16",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h16",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h15",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux",
            "macOS",
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.2.4",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.2.4",
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003eNo special configuration is required to be affected by this issue.\u003c/span\u003e"
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Windows:*:*",
                  "versionEndExcluding": "6.3.3-h16",
                  "versionStartIncluding": "6.3.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Windows:*:*",
                  "versionEndExcluding": "6.2.8-h15",
                  "versionStartIncluding": "6.2.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Windows:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Artemy Tsetsersky"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "an internal security researcher"
        }
      ],
      "datePublic": "2026-10-14T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003eA type confusion vulnerability in Palo Alto Networks GlobalProtect\u2122 app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition.\u003c/span\u003e\u003cbr\u003e\u003cbr\u003e\u003cspan\u003eThe GlobalProtect\u2122 app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability.\u003c/span\u003e"
            }
          ],
          "value": "A type confusion vulnerability in Palo Alto Networks GlobalProtect\u2122 app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition.\n\nThe GlobalProtect\u2122 app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-153",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-153 Input Data Manipulation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-843",
              "description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T20:25:32.075Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "name": "PAN-OS Security Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0314"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003c/th\u003e\u003cth\u003eMinor Version\u003c/th\u003e\u003cth\u003eSuggested Solution\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on Windows\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h15\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h16 (6.3.3-1199) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on Windows\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h14\u003c/td\u003e\u003ctd\u003eUpgrade to\u0026nbsp;6.2.8-h15 (6.2.8-1084) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Window\u003cb\u003es\u003c/b\u003e\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u0026nbsp;\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Linux\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on macOS\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Chrome OS\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eAll older unsupported GlobalProtect App versions\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eUpgrade to a supported fixed version.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VersionMinor VersionSuggested SolutionGlobalProtect App 6.3 on Windows6.3.0 through 6.3.3-h15\nUpgrade to 6.3.3-h16 (6.3.3-1199) or later.GlobalProtect App 6.2 on Windows6.2.0 through 6.2.8-h14Upgrade to\u00a06.2.8-h15 (6.2.8-1084) or later.GlobalProtect App 6.0 on Windows6.0.0 through 6.0.14Upgrade to 6.0.15 or later.\u00a0GlobalProtect App on Linux\u00a0No action needed.GlobalProtect App on macOS\u00a0No action needed.GlobalProtect App on iOS\u00a0No action needed.GlobalProtect App on Android\u00a0No action needed.GlobalProtect App on Chrome OS\u00a0No action needed.All older unsupported GlobalProtect App versions\u00a0Upgrade to a supported fixed version."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-14T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "GlobalProtect App: Local Denial of Service (DoS) on Windows",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No known workarounds exist for this issue."
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.3",
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.0.14",
        "GlobalProtect App 6.0.13",
        "GlobalProtect App 6.0.12",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0314",
    "datePublished": "2026-10-14T20:25:32.075Z",
    "dateReserved": "2025-11-03T20:45:12.840Z",
    "dateUpdated": "2026-10-15T18:41:54.691Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-0315 (GCVE-0-2026-0315)

    Vulnerability from cvelistv5 – Published: 2026-10-14 20:24 – Updated: 2026-10-16 03:56
    VLAI
    Title
    GlobalProtect App: Local Privilege Escalation Vulnerability on macOS
    Summary
    A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on Linux, Windows, iOS, Android and Chrome OS is not affected by this vulnerability.
    Severity
    5.9 (Medium)
    CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-15 00:00 UTC
    CWE
    Assigner
    palo_alto CNA under the mitre root
    CNA scorecard A 95/100 over 96 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Palo Alto Networks GlobalProtect App Affected: 6.2.0 , < 6.2.8-h15 (custom)
    Affected: 6.3.0 , < 6.3.3-h16 (custom)
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:macOS:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:macOS:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*
        cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*
    		Create a notification for this product.
    Palo Alto Networks GlobalProtect App Unaffected: All , < 12.2.4 (custom)
    		Create a notification for this product.
    Date Public
    2026-10-14 16:00
    Credits
    Ronen Seleri and Shahaf Pruss of Blyde Labs Christopher Ellis of Workday James Otten (internal reporter)
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0315",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-16T03:56:58.518Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.2.8-h15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h15",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.3.3-h16",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h16",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux",
            "Windows",
            "iOS",
            "Android",
            "ChromeOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.2.4",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.2.4",
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.2.8-h15",
                  "versionStartIncluding": "6.2.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.3.3-h16",
                  "versionStartIncluding": "6.3.3",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Ronen Seleri and Shahaf Pruss of Blyde Labs"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Christopher Ellis of Workday"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "James Otten (internal reporter)"
        }
      ],
      "datePublic": "2026-10-14T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003eA local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect\u2122 app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to execute arbitrary commands with administrative privileges.\u003c/span\u003e\u003cb\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003c/b\u003e\u003cspan\u003eThe GlobalProtect app on Linux, Windows, iOS, Android and Chrome OS is not affected by this vulnerability.\u003c/span\u003e"
            }
          ],
          "value": "A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect\u2122 app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to execute arbitrary commands with administrative privileges.\n\nThe GlobalProtect app on Linux, Windows, iOS, Android and Chrome OS is not affected by this vulnerability."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-233 Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-426",
              "description": "CWE-426 Untrusted Search Path",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T20:24:21.191Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "name": "PAN-OS Security Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0315"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003c/th\u003e\u003cth\u003e\u0026nbsp;\u003cb\u003eMinor Version\u003c/b\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on macOS\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h15\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h16 (\u003cspan\u003e6.3.3-1199\u003c/span\u003e) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on macOS\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h14\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h15 (6.2.8-1084) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Linux \u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Windows\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on ChromeOS\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "Version\u00a0Minor VersionSuggested SolutionGlobalProtect App 6.3 on macOS6.3.0 through 6.3.3-h15Upgrade to 6.3.3-h16 (6.3.3-1199) or later.GlobalProtect App 6.2 on macOS6.2.0 through 6.2.8-h14\nUpgrade to 6.2.8-h15 (6.2.8-1084) or later.GlobalProtect App on Linux \n\u00a0No action needed.GlobalProtect App on Windows\u00a0No action needed.GlobalProtect App on iOS\u00a0No action needed.GlobalProtect App on Android\u00a0No action needed.GlobalProtect App on ChromeOS\u00a0No action needed."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-14T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "GlobalProtect App: Local Privilege Escalation Vulnerability on macOS",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No known workarounds exist for this issue."
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.3",
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0315",
    "datePublished": "2026-10-14T20:24:21.191Z",
    "dateReserved": "2025-11-03T20:45:13.819Z",
    "dateUpdated": "2026-10-16T03:56:58.518Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-0316 (GCVE-0-2026-0316)

    Vulnerability from cvelistv5 – Published: 2026-10-14 20:23 – Updated: 2026-10-15 18:42
    VLAI
    Title
    PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability
    Summary
    A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface. The security risk posed by this issue is minimized when the management interface is restricted to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .  This issue is applicable to PAN-OS® software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma® Access are not affected by these vulnerabilities.
    Severity
    1.1 (Low)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
    0.4 (Low)
    CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-15 18:42 UTC
    CWE
    • CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
    Assigner
    palo_alto CNA under the mitre root
    CNA scorecard A 95/100 over 96 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Palo Alto Networks Cloud NGFW Unaffected: All (custom)
    		Create a notification for this product.
    Palo Alto Networks PAN-OS Affected: 12.2.0 , < 12.2.4 (custom)
    Affected: 12.1.0 , < 12.1.10-h2 (custom)
    Affected: 11.2.0 , < 11.2.16 (custom)
    Affected: 11.1.0 , < 11.1.16-h3 (custom)
        cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*
    		Create a notification for this product.
    Palo Alto Networks Prisma Access Unaffected: All , < 12.1.7-h8 (custom)
    		Create a notification for this product.
    Date Public
    2026-10-14 16:00
    Credits
    Palo Alto Networks thanks Michał Skowron and Tomasz Stachowicz with ING Hubs Poland and internal reporter James Otten for discovering and reporting this issue.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0316",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T18:42:12.744482Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T18:42:26.375Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Cloud NGFW",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "affected",
          "product": "PAN-OS",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.2.4",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.2.4",
              "status": "affected",
              "version": "12.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "12.1.10-h2",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.1.10-h2",
              "status": "affected",
              "version": "12.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.2.16",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.2.16",
              "status": "affected",
              "version": "11.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.1.16-h3",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.1.16-h3",
              "status": "affected",
              "version": "11.1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Prisma Access",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.1.7-h8",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.1.7-h8",
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.2.4",
                  "versionStartIncluding": "12.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.1.10-h2",
                  "versionStartIncluding": "12.1.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.2.16",
                  "versionStartIncluding": "11.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.1.16-h3",
                  "versionStartIncluding": "11.1.16",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Palo Alto Networks thanks Micha\u0142 Skowron and Tomasz Stachowicz with ING Hubs Poland and internal reporter James Otten for discovering and reporting this issue."
        }
      ],
      "datePublic": "2026-10-14T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cspan\u003eA stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS\u00ae software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface.\u003c/span\u003e\u003c/p\u003e\u003cp\u003e\u003cspan\u003eThe security risk posed by this issue is minimized when the management interface is restricted to only trusted internal IP addresses according to our recommended\u0026nbsp;\u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431\"\u003e\u003cspan\u003ebest practice deployment guidelines\u003c/span\u003e\u003c/a\u003e.\u0026nbsp;\u003cbr\u003e\u003c/p\u003e\u003cp\u003e\u003cspan\u003eThis issue is applicable to PAN-OS\u00ae software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).\u003c/span\u003e\u003c/p\u003e\u003cp\u003e\u003cspan\u003eCloud NGFW and Prisma\u00ae Access are not affected by these vulnerabilities.\u003c/span\u003e\u003c/p\u003e"
            }
          ],
          "value": "A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS\u00ae software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface.\n\n\n\nThe security risk posed by this issue is minimized when the management interface is restricted to only trusted internal IP addresses according to our recommended\u00a0 best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .\u00a0\n\n\n\n\nThis issue is applicable to PAN-OS\u00ae software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).\n\n\n\nCloud NGFW and Prisma\u00ae Access are not affected by these vulnerabilities."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-592",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-592 Stored XSS"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 1.1,
            "baseSeverity": "LOW",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "The risk is highest when you allow access to the management interface from external IP addresses on the internet."
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "ADJACENT",
            "baseScore": 0.4,
            "baseSeverity": "LOW",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "You can reduce the risk of exploitation by restricting access to a jump box as the only system allowed to access the management interface."
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T20:23:03.075Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "name": "PAN-OS Security Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0316"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eCloud NGFW\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePAN-OS 12.2\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e12.2.0 through 12.2.3\u003c/td\u003e\u003ctd\u003eUpgrade to 12.2.4 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 12.1\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.1.2 through\u0026nbsp;12.1.10-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to\u0026nbsp;12.1.10-h2 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 11.2\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.0 through\u0026nbsp;11.2.15 \u003c/td\u003e\n                                \u003ctd\u003eUpgrade to\u0026nbsp;11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 11.1\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.0 through\u0026nbsp;11.1.16-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eAll older\u003cbr\u003eunsupported\u003cbr\u003ePAN-OS versions\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eUpgrade to a supported fixed version.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePrisma Access\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "Version\nMinor Version\nSuggested Solution\nCloud NGFW\nNo action needed.PAN-OS 12.2\n12.2.0 through 12.2.3Upgrade to 12.2.4 or later.\n                                PAN-OS 12.1\n\n                                12.1.2 through\u00a012.1.10-h*\n                                Upgrade to\u00a012.1.10-h2 or later.\n                            \n                                PAN-OS 11.2\n\n                                11.2.0 through\u00a011.2.15 \n                                Upgrade to\u00a011.2.16 or later.\n                            \n                                PAN-OS 11.1\n\n                                11.1.0 through\u00a011.1.16-h*\n                                Upgrade to 11.1.16-h3 or later.\n                            All older\nunsupported\nPAN-OS versions\u00a0Upgrade to a supported fixed version.Prisma Access\nNo action needed."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-14T16:00:00.000Z",
          "value": "Initial publication."
        }
      ],
      "title": "PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No known workarounds exist for this issue."
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_affectedList": [
        "PAN-OS 12.2.3",
        "PAN-OS 12.2.2",
        "PAN-OS 12.1.10",
        "PAN-OS 12.1.9",
        "PAN-OS 12.1.8",
        "PAN-OS 12.1.7-h6",
        "PAN-OS 12.1.7-h5",
        "PAN-OS 12.1.7-h3",
        "PAN-OS 12.1.7-h2",
        "PAN-OS 12.1.7-h1",
        "PAN-OS 12.1.7",
        "PAN-OS 12.1.6",
        "PAN-OS 12.1.5",
        "PAN-OS 12.1.4-h11",
        "PAN-OS 12.1.4-h10",
        "PAN-OS 12.1.4-h9",
        "PAN-OS 12.1.4-h8",
        "PAN-OS 12.1.4-h7",
        "PAN-OS 12.1.4-h6",
        "PAN-OS 12.1.4-h5",
        "PAN-OS 12.1.4-h3",
        "PAN-OS 12.1.4-h2",
        "PAN-OS 12.1.4",
        "PAN-OS 12.1.3-h3",
        "PAN-OS 12.1.3-h1",
        "PAN-OS 12.1.3",
        "PAN-OS 12.1.2",
        "PAN-OS 11.2.15",
        "PAN-OS 11.2.13-h2",
        "PAN-OS 11.2.13-h1",
        "PAN-OS 11.2.13",
        "PAN-OS 11.2.12",
        "PAN-OS 11.2.11",
        "PAN-OS 11.2.10-h14",
        "PAN-OS 11.2.10-h13",
        "PAN-OS 11.2.10-h12",
        "PAN-OS 11.2.10-h10",
        "PAN-OS 11.2.10-h9",
        "PAN-OS 11.2.10-h8",
        "PAN-OS 11.2.10-h7",
        "PAN-OS 11.2.10-h6",
        "PAN-OS 11.2.10-h5",
        "PAN-OS 11.2.10-h4",
        "PAN-OS 11.2.10-h3",
        "PAN-OS 11.2.10-h2",
        "PAN-OS 11.2.10-h1",
        "PAN-OS 11.2.10",
        "PAN-OS 11.2.9",
        "PAN-OS 11.2.8",
        "PAN-OS 11.2.7-h20",
        "PAN-OS 11.2.7-h19",
        "PAN-OS 11.2.7-h18",
        "PAN-OS 11.2.7-h17",
        "PAN-OS 11.2.7-h16",
        "PAN-OS 11.2.7-h15",
        "PAN-OS 11.2.7-h14",
        "PAN-OS 11.2.7-h13",
        "PAN-OS 11.2.7-h12",
        "PAN-OS 11.2.7-h11",
        "PAN-OS 11.2.7-h10",
        "PAN-OS 11.2.7-h8",
        "PAN-OS 11.2.7-h7",
        "PAN-OS 11.2.7-h4",
        "PAN-OS 11.2.7-h3",
        "PAN-OS 11.2.7-h2",
        "PAN-OS 11.2.7-h1",
        "PAN-OS 11.2.7",
        "PAN-OS 11.2.6",
        "PAN-OS 11.2.5",
        "PAN-OS 11.2.4-h21",
        "PAN-OS 11.2.4-h20",
        "PAN-OS 11.2.4-h18",
        "PAN-OS 11.2.4-h17",
        "PAN-OS 11.2.4-h15",
        "PAN-OS 11.2.4-h14",
        "PAN-OS 11.2.4-h12",
        "PAN-OS 11.2.4-h11",
        "PAN-OS 11.2.4-h10",
        "PAN-OS 11.2.4-h9",
        "PAN-OS 11.2.4-h8",
        "PAN-OS 11.2.4-h7",
        "PAN-OS 11.2.4-h6",
        "PAN-OS 11.2.4-h5",
        "PAN-OS 11.2.4-h4",
        "PAN-OS 11.2.4-h3",
        "PAN-OS 11.2.4-h2",
        "PAN-OS 11.2.4-h1",
        "PAN-OS 11.2.4",
        "PAN-OS 11.2.3-h5",
        "PAN-OS 11.2.3-h4",
        "PAN-OS 11.2.3-h3",
        "PAN-OS 11.2.3-h2",
        "PAN-OS 11.2.3-h1",
        "PAN-OS 11.2.3",
        "PAN-OS 11.2.2-h2",
        "PAN-OS 11.2.2-h1",
        "PAN-OS 11.2.1-h1",
        "PAN-OS 11.2.1",
        "PAN-OS 11.2.0-h1",
        "PAN-OS 11.2.0",
        "PAN-OS 11.1.16-h2",
        "PAN-OS 11.1.16-h1",
        "PAN-OS 11.1.16",
        "PAN-OS 11.1.15",
        "PAN-OS 11.1.14",
        "PAN-OS 11.1.13-h12",
        "PAN-OS 11.1.13-h11",
        "PAN-OS 11.1.13-h10",
        "PAN-OS 11.1.13-h9",
        "PAN-OS 11.1.13-h8",
        "PAN-OS 11.1.13-h7",
        "PAN-OS 11.1.13-h6",
        "PAN-OS 11.1.13-h5",
        "PAN-OS 11.1.13-h3",
        "PAN-OS 11.1.13-h2",
        "PAN-OS 11.1.13-h1",
        "PAN-OS 11.1.13",
        "PAN-OS 11.1.12",
        "PAN-OS 11.1.11",
        "PAN-OS 11.1.10-h33",
        "PAN-OS 11.1.10-h32",
        "PAN-OS 11.1.10-h30",
        "PAN-OS 11.1.10-h28",
        "PAN-OS 11.1.10-h27",
        "PAN-OS 11.1.10-h26",
        "PAN-OS 11.1.10-h25",
        "PAN-OS 11.1.10-h21",
        "PAN-OS 11.1.10-h12",
        "PAN-OS 11.1.10-h10",
        "PAN-OS 11.1.10-h9",
        "PAN-OS 11.1.10-h7",
        "PAN-OS 11.1.10-h5",
        "PAN-OS 11.1.10-h4",
        "PAN-OS 11.1.10-h1",
        "PAN-OS 11.1.10",
        "PAN-OS 11.1.9",
        "PAN-OS 11.1.8",
        "PAN-OS 11.1.6-h38",
        "PAN-OS 11.1.6-h36",
        "PAN-OS 11.1.6-h35",
        "PAN-OS 11.1.6-h34",
        "PAN-OS 11.1.6-h33",
        "PAN-OS 11.1.6-h32",
        "PAN-OS 11.1.6-h29",
        "PAN-OS 11.1.6-h25",
        "PAN-OS 11.1.6-h23",
        "PAN-OS 11.1.6-h22",
        "PAN-OS 11.1.6-h21",
        "PAN-OS 11.1.6-h20",
        "PAN-OS 11.1.6-h19",
        "PAN-OS 11.1.6-h18",
        "PAN-OS 11.1.6-h17",
        "PAN-OS 11.1.6-h14",
        "PAN-OS 11.1.6-h10",
        "PAN-OS 11.1.6-h7",
        "PAN-OS 11.1.6-h6",
        "PAN-OS 11.1.6-h4",
        "PAN-OS 11.1.6-h3",
        "PAN-OS 11.1.6-h2",
        "PAN-OS 11.1.6-h1",
        "PAN-OS 11.1.6",
        "PAN-OS 11.1.5-h1",
        "PAN-OS 11.1.5",
        "PAN-OS 11.1.4-h36",
        "PAN-OS 11.1.4-h35",
        "PAN-OS 11.1.4-h34",
        "PAN-OS 11.1.4-h33",
        "PAN-OS 11.1.4-h32",
        "PAN-OS 11.1.4-h27",
        "PAN-OS 11.1.4-h25",
        "PAN-OS 11.1.4-h18",
        "PAN-OS 11.1.4-h17",
        "PAN-OS 11.1.4-h15",
        "PAN-OS 11.1.4-h13",
        "PAN-OS 11.1.4-h12",
        "PAN-OS 11.1.4-h11",
        "PAN-OS 11.1.4-h10",
        "PAN-OS 11.1.4-h9",
        "PAN-OS 11.1.4-h8",
        "PAN-OS 11.1.4-h7",
        "PAN-OS 11.1.4-h6",
        "PAN-OS 11.1.4-h5",
        "PAN-OS 11.1.4-h4",
        "PAN-OS 11.1.4-h3",
        "PAN-OS 11.1.4-h2",
        "PAN-OS 11.1.4-h1",
        "PAN-OS 11.1.4",
        "PAN-OS 11.1.3-h13",
        "PAN-OS 11.1.3-h12",
        "PAN-OS 11.1.3-h11",
        "PAN-OS 11.1.3-h10",
        "PAN-OS 11.1.3-h9",
        "PAN-OS 11.1.3-h8",
        "PAN-OS 11.1.3-h7",
        "PAN-OS 11.1.3-h6",
        "PAN-OS 11.1.3-h5",
        "PAN-OS 11.1.3-h4",
        "PAN-OS 11.1.3-h3",
        "PAN-OS 11.1.3-h2",
        "PAN-OS 11.1.3-h1",
        "PAN-OS 11.1.3",
        "PAN-OS 11.1.2-h18",
        "PAN-OS 11.1.2-h17",
        "PAN-OS 11.1.2-h16",
        "PAN-OS 11.1.2-h15",
        "PAN-OS 11.1.2-h14",
        "PAN-OS 11.1.2-h13",
        "PAN-OS 11.1.2-h12",
        "PAN-OS 11.1.2-h11",
        "PAN-OS 11.1.2-h10",
        "PAN-OS 11.1.2-h9",
        "PAN-OS 11.1.2-h8",
        "PAN-OS 11.1.2-h7",
        "PAN-OS 11.1.2-h6",
        "PAN-OS 11.1.2-h5",
        "PAN-OS 11.1.2-h4",
        "PAN-OS 11.1.2-h3",
        "PAN-OS 11.1.2-h2",
        "PAN-OS 11.1.2-h1",
        "PAN-OS 11.1.2",
        "PAN-OS 11.1.1-h2",
        "PAN-OS 11.1.1-h1",
        "PAN-OS 11.1.1",
        "PAN-OS 11.1.0-h4",
        "PAN-OS 11.1.0-h3",
        "PAN-OS 11.1.0-h2",
        "PAN-OS 11.1.0-h1",
        "PAN-OS 11.1.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0316",
    "datePublished": "2026-10-14T20:23:03.075Z",
    "dateReserved": "2025-11-03T20:45:14.651Z",
    "dateUpdated": "2026-10-15T18:42:26.375Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-0317 (GCVE-0-2026-0317)

    Vulnerability from cvelistv5 – Published: 2026-10-14 20:21 – Updated: 2026-10-15 18:47
    VLAI
    Title
    PAN-OS: Denial of Service Vulnerability
    Summary
    A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only administrator role to cause a denial of service (DoS) condition by sending a specially crafted API request. The security risk posed by this issue is significantly minimized by restricting access to the management web interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . Cloud NGFW, Panorama, and Prisma® Access are not affected by this vulnerability.
    Severity
    1.2 (Low)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/AU:N/R:A/V:D/RE:L/U:Amber
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-15 18:45 UTC
    CWE
    • CWE-754 - Improper Check for Unusual or Exceptional Conditions
    Assigner
    palo_alto CNA under the mitre root
    CNA scorecard A 95/100 over 96 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Palo Alto Networks Cloud NGFW Unaffected: All (custom)
    		Create a notification for this product.
    Palo Alto Networks PAN-OS Affected: 12.2.0 , < 12.2.4 (custom)
    Affected: 12.1.0 , < 12.1.10-h2 (custom)
    Affected: 11.2.0 , < 11.2.16 (custom)
    Affected: 11.1.0 , < 11.1.16-h3 (custom)
        cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*
    		Create a notification for this product.
    Palo Alto Networks Prisma Access Unaffected: All , < 12.1.7-h8 (custom)
    		Create a notification for this product.
    Date Public
    2026-10-14 16:00
    Credits
    Michael Messner and Benedikt Kuehne
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0317",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T18:45:51.153391Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T18:47:53.957Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "Cloud NGFW",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "PAN-OS",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.2.4",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.2.4",
              "status": "affected",
              "version": "12.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "12.1.10-h2",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.1.10-h2",
              "status": "affected",
              "version": "12.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.2.16",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.2.16",
              "status": "affected",
              "version": "11.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.1.16-h3",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.1.16-h3",
              "status": "affected",
              "version": "11.1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Prisma Access",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.1.7-h8",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.1.7-h8",
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003eNo special configuration is required to be affected by this issue.\u003c/span\u003e"
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.2.4",
                  "versionStartIncluding": "12.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.1.10-h2",
                  "versionStartIncluding": "12.1.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.2.16",
                  "versionStartIncluding": "11.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.1.16-h3",
                  "versionStartIncluding": "11.1.16",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Michael Messner and Benedikt Kuehne"
        }
      ],
      "datePublic": "2026-10-14T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only administrator role\u0026nbsp;to cause a denial of service (DoS) condition by sending a specially crafted API request.\u003cbr\u003e\u003cbr\u003e\u003cspan\u003eThe security risk posed by this issue is significantly minimized by restricting access to the management web interface to only trusted internal IP addresses according to our recommended\u003c/span\u003e \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431\"\u003e\u003cspan\u003ebest practice deployment guidelines\u003c/span\u003e\u003c/a\u003e\u003cspan\u003e.\u003c/span\u003e\u003cbr\u003e\u003cbr\u003e\u003cspan\u003eCloud NGFW, Panorama, and Prisma\u00ae Access are not affected by this vulnerability.\u003c/span\u003e"
            }
          ],
          "value": "A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only administrator role\u00a0to cause a denial of service (DoS) condition by sending a specially crafted API request.\n\nThe security risk posed by this issue is significantly minimized by restricting access to the management web interface to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .\n\nCloud NGFW, Panorama, and Prisma\u00ae Access are not affected by this vulnerability."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-130",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-130 Excessive Allocation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "AUTOMATIC",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 1.2,
            "baseSeverity": "LOW",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/AU:N/R:A/V:D/RE:L/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "LOW"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-754",
              "description": "CWE-754 Improper Check for Unusual or Exceptional Conditions",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T20:21:21.338Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "name": "PAN-OS Security Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0317"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003c/th\u003e\u003cth\u003eMinor Version Range\u003c/th\u003e\u003cth\u003eSuggested Solution\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eCloud NGFW\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action required.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u0026nbsp;PAN-OS 12.1\u003c/td\u003e\u003ctd\u003e12.2.0 through 12.2.3-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 12.2.4 or later.\u0026nbsp;\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePAN-OS 12.1\u003c/td\u003e\u003ctd\u003e12.1.2 through 12.1.10-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 12.1.10-h2 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePAN-OS 11.2\u003c/td\u003e\u003ctd\u003e11.2.0 through 11.2.15-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 11.2.16 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePAN-OS 11.1\u003c/td\u003e\u003ctd\u003e11.1.0 through 11.1.16-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 11.1.16-h3 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eAll other older\u003cbr\u003eunsupported\u003cbr\u003ePAN-OS versions\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to a supported fixed version.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u0026nbsp;Prisma Access\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VersionMinor Version RangeSuggested SolutionCloud NGFW\nNo action required.\u00a0PAN-OS 12.112.2.0 through 12.2.3-h*Upgrade to 12.2.4 or later.\u00a0PAN-OS 12.112.1.2 through 12.1.10-h*Upgrade to 12.1.10-h2 or later.PAN-OS 11.211.2.0 through 11.2.15-h*Upgrade to 11.2.16 or later.PAN-OS 11.111.1.0 through 11.1.16-h*Upgrade to 11.1.16-h3 or later.All other older\nunsupported\nPAN-OS versions\nUpgrade to a supported fixed version.\u00a0Prisma Access\nNo action needed."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:00:00.000Z",
          "value": "Initial publication"
        }
      ],
      "title": "PAN-OS: Denial of Service Vulnerability",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003eNo known workarounds exist for this issue.\u003c/span\u003e"
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_affectedList": [
        "PAN-OS 12.2.3",
        "PAN-OS 12.2.2",
        "PAN-OS 12.1.10",
        "PAN-OS 12.1.9",
        "PAN-OS 12.1.8",
        "PAN-OS 12.1.7-h6",
        "PAN-OS 12.1.7-h5",
        "PAN-OS 12.1.7-h3",
        "PAN-OS 12.1.7-h2",
        "PAN-OS 12.1.7-h1",
        "PAN-OS 12.1.7",
        "PAN-OS 12.1.6",
        "PAN-OS 12.1.5",
        "PAN-OS 12.1.4-h11",
        "PAN-OS 12.1.4-h10",
        "PAN-OS 12.1.4-h9",
        "PAN-OS 12.1.4-h8",
        "PAN-OS 12.1.4-h7",
        "PAN-OS 12.1.4-h6",
        "PAN-OS 12.1.4-h5",
        "PAN-OS 12.1.4-h3",
        "PAN-OS 12.1.4-h2",
        "PAN-OS 12.1.4",
        "PAN-OS 12.1.3-h3",
        "PAN-OS 12.1.3-h1",
        "PAN-OS 12.1.3",
        "PAN-OS 12.1.2",
        "PAN-OS 11.2.15",
        "PAN-OS 11.2.13-h2",
        "PAN-OS 11.2.13-h1",
        "PAN-OS 11.2.13",
        "PAN-OS 11.2.12",
        "PAN-OS 11.2.11",
        "PAN-OS 11.2.10-h14",
        "PAN-OS 11.2.10-h13",
        "PAN-OS 11.2.10-h12",
        "PAN-OS 11.2.10-h10",
        "PAN-OS 11.2.10-h9",
        "PAN-OS 11.2.10-h8",
        "PAN-OS 11.2.10-h7",
        "PAN-OS 11.2.10-h6",
        "PAN-OS 11.2.10-h5",
        "PAN-OS 11.2.10-h4",
        "PAN-OS 11.2.10-h3",
        "PAN-OS 11.2.10-h2",
        "PAN-OS 11.2.10-h1",
        "PAN-OS 11.2.10",
        "PAN-OS 11.2.9",
        "PAN-OS 11.2.8",
        "PAN-OS 11.2.7-h20",
        "PAN-OS 11.2.7-h19",
        "PAN-OS 11.2.7-h18",
        "PAN-OS 11.2.7-h17",
        "PAN-OS 11.2.7-h16",
        "PAN-OS 11.2.7-h15",
        "PAN-OS 11.2.7-h14",
        "PAN-OS 11.2.7-h13",
        "PAN-OS 11.2.7-h12",
        "PAN-OS 11.2.7-h11",
        "PAN-OS 11.2.7-h10",
        "PAN-OS 11.2.7-h8",
        "PAN-OS 11.2.7-h7",
        "PAN-OS 11.2.7-h4",
        "PAN-OS 11.2.7-h3",
        "PAN-OS 11.2.7-h2",
        "PAN-OS 11.2.7-h1",
        "PAN-OS 11.2.7",
        "PAN-OS 11.2.6",
        "PAN-OS 11.2.5",
        "PAN-OS 11.2.4-h21",
        "PAN-OS 11.2.4-h20",
        "PAN-OS 11.2.4-h18",
        "PAN-OS 11.2.4-h17",
        "PAN-OS 11.2.4-h15",
        "PAN-OS 11.2.4-h14",
        "PAN-OS 11.2.4-h12",
        "PAN-OS 11.2.4-h11",
        "PAN-OS 11.2.4-h10",
        "PAN-OS 11.2.4-h9",
        "PAN-OS 11.2.4-h8",
        "PAN-OS 11.2.4-h7",
        "PAN-OS 11.2.4-h6",
        "PAN-OS 11.2.4-h5",
        "PAN-OS 11.2.4-h4",
        "PAN-OS 11.2.4-h3",
        "PAN-OS 11.2.4-h2",
        "PAN-OS 11.2.4-h1",
        "PAN-OS 11.2.4",
        "PAN-OS 11.2.3-h5",
        "PAN-OS 11.2.3-h4",
        "PAN-OS 11.2.3-h3",
        "PAN-OS 11.2.3-h2",
        "PAN-OS 11.2.3-h1",
        "PAN-OS 11.2.3",
        "PAN-OS 11.2.2-h2",
        "PAN-OS 11.2.2-h1",
        "PAN-OS 11.2.1-h1",
        "PAN-OS 11.2.1",
        "PAN-OS 11.2.0-h1",
        "PAN-OS 11.2.0",
        "PAN-OS 11.1.16-h2",
        "PAN-OS 11.1.16-h1",
        "PAN-OS 11.1.16",
        "PAN-OS 11.1.15",
        "PAN-OS 11.1.14",
        "PAN-OS 11.1.13-h12",
        "PAN-OS 11.1.13-h11",
        "PAN-OS 11.1.13-h10",
        "PAN-OS 11.1.13-h9",
        "PAN-OS 11.1.13-h8",
        "PAN-OS 11.1.13-h7",
        "PAN-OS 11.1.13-h6",
        "PAN-OS 11.1.13-h5",
        "PAN-OS 11.1.13-h3",
        "PAN-OS 11.1.13-h2",
        "PAN-OS 11.1.13-h1",
        "PAN-OS 11.1.13",
        "PAN-OS 11.1.12",
        "PAN-OS 11.1.11",
        "PAN-OS 11.1.10-h33",
        "PAN-OS 11.1.10-h32",
        "PAN-OS 11.1.10-h30",
        "PAN-OS 11.1.10-h28",
        "PAN-OS 11.1.10-h27",
        "PAN-OS 11.1.10-h26",
        "PAN-OS 11.1.10-h25",
        "PAN-OS 11.1.10-h21",
        "PAN-OS 11.1.10-h12",
        "PAN-OS 11.1.10-h10",
        "PAN-OS 11.1.10-h9",
        "PAN-OS 11.1.10-h7",
        "PAN-OS 11.1.10-h5",
        "PAN-OS 11.1.10-h4",
        "PAN-OS 11.1.10-h1",
        "PAN-OS 11.1.10",
        "PAN-OS 11.1.9",
        "PAN-OS 11.1.8",
        "PAN-OS 11.1.6-h38",
        "PAN-OS 11.1.6-h36",
        "PAN-OS 11.1.6-h35",
        "PAN-OS 11.1.6-h34",
        "PAN-OS 11.1.6-h33",
        "PAN-OS 11.1.6-h32",
        "PAN-OS 11.1.6-h29",
        "PAN-OS 11.1.6-h25",
        "PAN-OS 11.1.6-h23",
        "PAN-OS 11.1.6-h22",
        "PAN-OS 11.1.6-h21",
        "PAN-OS 11.1.6-h20",
        "PAN-OS 11.1.6-h19",
        "PAN-OS 11.1.6-h18",
        "PAN-OS 11.1.6-h17",
        "PAN-OS 11.1.6-h14",
        "PAN-OS 11.1.6-h10",
        "PAN-OS 11.1.6-h7",
        "PAN-OS 11.1.6-h6",
        "PAN-OS 11.1.6-h4",
        "PAN-OS 11.1.6-h3",
        "PAN-OS 11.1.6-h2",
        "PAN-OS 11.1.6-h1",
        "PAN-OS 11.1.6",
        "PAN-OS 11.1.5-h1",
        "PAN-OS 11.1.5",
        "PAN-OS 11.1.4-h36",
        "PAN-OS 11.1.4-h35",
        "PAN-OS 11.1.4-h34",
        "PAN-OS 11.1.4-h33",
        "PAN-OS 11.1.4-h32",
        "PAN-OS 11.1.4-h27",
        "PAN-OS 11.1.4-h25",
        "PAN-OS 11.1.4-h18",
        "PAN-OS 11.1.4-h17",
        "PAN-OS 11.1.4-h15",
        "PAN-OS 11.1.4-h13",
        "PAN-OS 11.1.4-h12",
        "PAN-OS 11.1.4-h11",
        "PAN-OS 11.1.4-h10",
        "PAN-OS 11.1.4-h9",
        "PAN-OS 11.1.4-h8",
        "PAN-OS 11.1.4-h7",
        "PAN-OS 11.1.4-h6",
        "PAN-OS 11.1.4-h5",
        "PAN-OS 11.1.4-h4",
        "PAN-OS 11.1.4-h3",
        "PAN-OS 11.1.4-h2",
        "PAN-OS 11.1.4-h1",
        "PAN-OS 11.1.4",
        "PAN-OS 11.1.3-h13",
        "PAN-OS 11.1.3-h12",
        "PAN-OS 11.1.3-h11",
        "PAN-OS 11.1.3-h10",
        "PAN-OS 11.1.3-h9",
        "PAN-OS 11.1.3-h8",
        "PAN-OS 11.1.3-h7",
        "PAN-OS 11.1.3-h6",
        "PAN-OS 11.1.3-h5",
        "PAN-OS 11.1.3-h4",
        "PAN-OS 11.1.3-h3",
        "PAN-OS 11.1.3-h2",
        "PAN-OS 11.1.3-h1",
        "PAN-OS 11.1.3",
        "PAN-OS 11.1.2-h18",
        "PAN-OS 11.1.2-h17",
        "PAN-OS 11.1.2-h16",
        "PAN-OS 11.1.2-h15",
        "PAN-OS 11.1.2-h14",
        "PAN-OS 11.1.2-h13",
        "PAN-OS 11.1.2-h12",
        "PAN-OS 11.1.2-h11",
        "PAN-OS 11.1.2-h10",
        "PAN-OS 11.1.2-h9",
        "PAN-OS 11.1.2-h8",
        "PAN-OS 11.1.2-h7",
        "PAN-OS 11.1.2-h6",
        "PAN-OS 11.1.2-h5",
        "PAN-OS 11.1.2-h4",
        "PAN-OS 11.1.2-h3",
        "PAN-OS 11.1.2-h2",
        "PAN-OS 11.1.2-h1",
        "PAN-OS 11.1.2",
        "PAN-OS 11.1.1-h2",
        "PAN-OS 11.1.1-h1",
        "PAN-OS 11.1.1",
        "PAN-OS 11.1.0-h4",
        "PAN-OS 11.1.0-h3",
        "PAN-OS 11.1.0-h2",
        "PAN-OS 11.1.0-h1",
        "PAN-OS 11.1.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0317",
    "datePublished": "2026-10-14T20:21:21.338Z",
    "dateReserved": "2025-11-03T20:45:15.561Z",
    "dateUpdated": "2026-10-15T18:47:53.957Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-0318 (GCVE-0-2026-0318)

    Vulnerability from cvelistv5 – Published: 2026-10-14 20:19 – Updated: 2026-10-15 18:48
    VLAI
    Title
    PAN-OS: Denial of Service (DoS) on Panorama
    Summary
    A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software on Panorama enables an attacker to cause a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the Panorama entering maintenance mode. Cloud NGFW, Prisma® Access, and standalone PAN-OS firewalls are not affected by this vulnerability.
    Severity
    4.6 (Medium)
    CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-15 18:48 UTC
    CWE
    • CWE-754 - Improper Check for Unusual or Exceptional Conditions
    Assigner
    palo_alto CNA under the mitre root
    CNA scorecard A 95/100 over 96 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Palo Alto Networks Cloud NGFW Unaffected: All (custom)
    		Create a notification for this product.
    Palo Alto Networks PAN-OS Affected: 12.2.0 , < 12.2.4 (custom)
    Affected: 12.1.0 , < 12.1.10-h2 (custom)
    Affected: 11.2.0 , < 11.2.16 (custom)
    Affected: 11.1.0 , < 11.1.16-h3 (custom)
        cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h12:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h11:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h10:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h9:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h8:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h7:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h6:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h5:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h33:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h32:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h30:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h28:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h27:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h26:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h25:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h38:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h36:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h35:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h34:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h33:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h32:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h36:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h35:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h34:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h33:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:Panorama:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:Panorama:*
    		Create a notification for this product.
    Palo Alto Networks Prisma Access Unaffected: All , < 12.1.7-h8 (custom)
    		Create a notification for this product.
    Date Public
    2026-10-14 16:00
    Credits
    Ben Nott (internal reporter)
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0318",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T18:48:12.298954Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T18:48:22.858Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Cloud NGFW",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h12:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h11:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h10:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h9:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h8:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h7:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h6:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h5:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h33:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h32:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h30:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h28:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h27:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h26:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h25:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h38:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h36:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h35:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h34:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h33:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h32:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h36:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h35:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h34:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h33:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:Panorama:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:Panorama:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Panorama"
          ],
          "product": "PAN-OS",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.2.4",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.2.4",
              "status": "affected",
              "version": "12.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "12.1.4-h12",
                  "status": "unaffected"
                },
                {
                  "at": "12.1.7-h8",
                  "status": "unaffected"
                },
                {
                  "at": "12.1.10-h2",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.1.10-h2",
              "status": "affected",
              "version": "12.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.2.4-h22",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.7-h21",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.10-h15",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.13-h3",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.2.16",
              "status": "affected",
              "version": "11.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.1.4-h37",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.6-h39",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.7-h11",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.10-h35",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.13-h15",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.16-h3",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.1.16-h3",
              "status": "affected",
              "version": "11.1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Prisma Access",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.1.7-h8",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.1.7-h8",
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cspan\u003eThis issue applies only to Panorama in \u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/panorama/getting-started/set-up-panorama/set-up-the-panorama-virtual-appliance/set-up-the-panorama-virtual-appliance-in-panorama-mode\"\u003e\u003cspan\u003epanorama system\u003c/span\u003e\u003c/a\u003e\u003cspan\u003e-mode (or \u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/panorama/getting-started/set-up-panorama/set-up-the-panorama-virtual-appliance/set-up-the-panorama-virtual-appliance-in-management-only-mode\"\u003e\u003cspan\u003emanagement-only \u003c/span\u003e\u003c/a\u003e\u003cspan\u003ewith Log Collector) with a \u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/panorama/getting-started/set-up-panorama/set-up-the-panorama-virtual-appliance/set-up-the-panorama-virtual-appliance-as-a-log-collector\"\u003e\u003cspan\u003eCollector Group configured\u003c/span\u003e\u003c/a\u003e\u003cspan\u003e. Standalone PAN-OS firewalls are not affected.\u003c/span\u003e\u003c/p\u003e"
            }
          ],
          "value": "This issue applies only to Panorama in  panorama system https://docs.paloaltonetworks.com/panorama/getting-started/set-up-panorama/set-up-the-panorama-virtual-appliance/set-up-the-panorama-virtual-appliance-in-panorama-mode -mode (or  management-only  https://docs.paloaltonetworks.com/panorama/getting-started/set-up-panorama/set-up-the-panorama-virtual-appliance/set-up-the-panorama-virtual-appliance-in-management-only-mode with Log Collector) with a  Collector Group configured https://docs.paloaltonetworks.com/panorama/getting-started/set-up-panorama/set-up-the-panorama-virtual-appliance/set-up-the-panorama-virtual-appliance-as-a-log-collector . Standalone PAN-OS firewalls are not affected."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*",
                  "versionEndExcluding": "12.2.4",
                  "versionStartIncluding": "12.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*",
                  "versionEndExcluding": "12.1.4-h12",
                  "versionStartIncluding": "12.1.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*",
                  "versionEndExcluding": "12.1.7-h8",
                  "versionStartIncluding": "12.1.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*",
                  "versionEndExcluding": "12.1.10-h2",
                  "versionStartIncluding": "12.1.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*",
                  "versionEndExcluding": "11.2.4-h22",
                  "versionStartIncluding": "11.2.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*",
                  "versionEndExcluding": "11.2.7-h21",
                  "versionStartIncluding": "11.2.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*",
                  "versionEndExcluding": "11.2.10-h15",
                  "versionStartIncluding": "11.2.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*",
                  "versionEndExcluding": "11.2.13-h3",
                  "versionStartIncluding": "11.2.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*",
                  "versionEndExcluding": "11.2.15",
                  "versionStartIncluding": "11.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*",
                  "versionEndExcluding": "11.1.4-h37",
                  "versionStartIncluding": "11.1.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*",
                  "versionEndExcluding": "11.1.6-h39",
                  "versionStartIncluding": "11.1.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*",
                  "versionEndExcluding": "11.1.7-h11",
                  "versionStartIncluding": "11.1.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*",
                  "versionEndExcluding": "11.1.10-h35",
                  "versionStartIncluding": "11.1.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*",
                  "versionEndExcluding": "11.1.13-h15",
                  "versionStartIncluding": "11.1.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:Panorama:*:*",
                  "versionEndExcluding": "11.1.16-h3",
                  "versionStartIncluding": "11.1.16",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Ben Nott (internal reporter)"
        }
      ],
      "datePublic": "2026-10-14T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS\u00ae software on Panorama enables an attacker to cause a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the Panorama entering maintenance mode.\u003cbr\u003e\u003cbr\u003eCloud NGFW, Prisma\u00ae Access, and standalone PAN-OS firewalls are not affected by this vulnerability."
            }
          ],
          "value": "A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS\u00ae software on Panorama enables an attacker to cause a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the Panorama entering maintenance mode.\n\nCloud NGFW, Prisma\u00ae Access, and standalone PAN-OS firewalls are not affected by this vulnerability."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-153",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-153 Input Data Manipulation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-754",
              "description": "CWE-754 Improper Check for Unusual or Exceptional Conditions",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T20:19:28.773Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "name": "PAN-OS Security Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0318"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003c/th\u003e\u003cth\u003eMinor Version\u003c/th\u003e\u003cth\u003eSuggested Solution\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eCloud NGFW\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePAN-OS 12.2\u003c/td\u003e\u003ctd\u003e12.2.0 through 12.2.3\u003c/td\u003e\u003ctd\u003eUpgrade to 12.2.4 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePAN-OS 12.1\u003c/td\u003e\u003ctd\u003e12.1.8 through 12.1.10-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 12.1.10-h2 or later.\u0026nbsp;\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003e12.1.5 through 12.1.7-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 12.1.7-h8 or 12.1.10-h2 or later.\u0026nbsp;\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003e12.1.2 through 12.1.4-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 12.1.4-h12 or 12.1.10-h2 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePAN-OS 11.2\u003c/td\u003e\u003ctd\u003e11.2.14 through 11.2.14-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 11.2.15 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003e11.2.11 through 11.2.13-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 11.2.13-h3 or 11.2.15 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003e11.2.8 through 11.2.10-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 11.2.10-h15 or 11.2.15 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003e11.2.5 through 11.2.7-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 11.2.7-h21 or 11.2.15 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003e11.2.0 through 11.2.4-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 11.2.4-h22 or 11.2.15 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePAN-OS 11.1\u003c/td\u003e\u003ctd\u003e11.1.14 through 11.1.16-h*\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 11.1.16-h3 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003e11.1.11 through 11.1.13-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 11.1.13-h15 or 11.1.16-h3 or later.\u0026nbsp;\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003e11.1.8 through 11.1.10-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 11.1.10-h35 or 11.1.16-h3 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003e11.1.7 through 11.1.7-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 11.1.7-h11 or 11.1.16-h3 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003e11.1.5 through 11.1.6-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 11.1.6-h39 or 11.1.16-h3 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003e11.1.0 through 11.1.4-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 11.1.4-h37 or 11.1.16-h3 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eAll older\u003cbr\u003eunsupported\u003cbr\u003ePAN-OS versions\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to a supported fixed version.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePrisma Access\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VersionMinor VersionSuggested SolutionCloud NGFWNo action needed.PAN-OS 12.212.2.0 through 12.2.3Upgrade to 12.2.4 or later.PAN-OS 12.112.1.8 through 12.1.10-h*Upgrade to 12.1.10-h2 or later.\u00a012.1.5 through 12.1.7-h*Upgrade to 12.1.7-h8 or 12.1.10-h2 or later.\u00a012.1.2 through 12.1.4-h*Upgrade to 12.1.4-h12 or 12.1.10-h2 or later.PAN-OS 11.211.2.14 through 11.2.14-h*Upgrade to 11.2.15 or later.11.2.11 through 11.2.13-h*Upgrade to 11.2.13-h3 or 11.2.15 or later.11.2.8 through 11.2.10-h*Upgrade to 11.2.10-h15 or 11.2.15 or later.11.2.5 through 11.2.7-h*Upgrade to 11.2.7-h21 or 11.2.15 or later.11.2.0 through 11.2.4-h*Upgrade to 11.2.4-h22 or 11.2.15 or later.PAN-OS 11.111.1.14 through 11.1.16-h*\nUpgrade to 11.1.16-h3 or later.\u00a011.1.11 through 11.1.13-h*Upgrade to 11.1.13-h15 or 11.1.16-h3 or later.\u00a011.1.8 through 11.1.10-h*Upgrade to 11.1.10-h35 or 11.1.16-h3 or later.11.1.7 through 11.1.7-h*Upgrade to 11.1.7-h11 or 11.1.16-h3 or later.11.1.5 through 11.1.6-h*Upgrade to 11.1.6-h39 or 11.1.16-h3 or later.11.1.0 through 11.1.4-h*Upgrade to 11.1.4-h37 or 11.1.16-h3 or later.All older\nunsupported\nPAN-OS versionsUpgrade to a supported fixed version.Prisma Access\u00a0No action needed."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-14T16:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "PAN-OS: Denial of Service (DoS) on Panorama",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The risk posed by this vulnerability can be reduced significantly by limiting access to Panorama to only known good IP addresses."
            }
          ],
          "value": "The risk posed by this vulnerability can be reduced significantly by limiting access to Panorama to only known good IP addresses."
        }
      ],
      "x_affectedList": [
        "PAN-OS 12.2.3",
        "PAN-OS 12.2.2",
        "PAN-OS 12.1.10",
        "PAN-OS 12.1.9",
        "PAN-OS 12.1.8",
        "PAN-OS 12.1.7-h6",
        "PAN-OS 12.1.7-h5",
        "PAN-OS 12.1.7-h3",
        "PAN-OS 12.1.7-h2",
        "PAN-OS 12.1.7-h1",
        "PAN-OS 12.1.7",
        "PAN-OS 12.1.6",
        "PAN-OS 12.1.5",
        "PAN-OS 12.1.4-h11",
        "PAN-OS 12.1.4-h10",
        "PAN-OS 12.1.4-h9",
        "PAN-OS 12.1.4-h8",
        "PAN-OS 12.1.4-h7",
        "PAN-OS 12.1.4-h6",
        "PAN-OS 12.1.4-h5",
        "PAN-OS 12.1.4-h3",
        "PAN-OS 12.1.4-h2",
        "PAN-OS 12.1.4",
        "PAN-OS 12.1.3-h3",
        "PAN-OS 12.1.3-h1",
        "PAN-OS 12.1.3",
        "PAN-OS 12.1.2",
        "PAN-OS 11.2.13-h2",
        "PAN-OS 11.2.13-h1",
        "PAN-OS 11.2.13",
        "PAN-OS 11.2.12",
        "PAN-OS 11.2.11",
        "PAN-OS 11.2.10-h14",
        "PAN-OS 11.2.10-h13",
        "PAN-OS 11.2.10-h12",
        "PAN-OS 11.2.10-h10",
        "PAN-OS 11.2.10-h9",
        "PAN-OS 11.2.10-h8",
        "PAN-OS 11.2.10-h7",
        "PAN-OS 11.2.10-h6",
        "PAN-OS 11.2.10-h5",
        "PAN-OS 11.2.10-h4",
        "PAN-OS 11.2.10-h3",
        "PAN-OS 11.2.10-h2",
        "PAN-OS 11.2.10-h1",
        "PAN-OS 11.2.10",
        "PAN-OS 11.2.9",
        "PAN-OS 11.2.8",
        "PAN-OS 11.2.7-h20",
        "PAN-OS 11.2.7-h19",
        "PAN-OS 11.2.7-h18",
        "PAN-OS 11.2.7-h17",
        "PAN-OS 11.2.7-h16",
        "PAN-OS 11.2.7-h15",
        "PAN-OS 11.2.7-h14",
        "PAN-OS 11.2.7-h13",
        "PAN-OS 11.2.7-h12",
        "PAN-OS 11.2.7-h11",
        "PAN-OS 11.2.7-h10",
        "PAN-OS 11.2.7-h8",
        "PAN-OS 11.2.7-h7",
        "PAN-OS 11.2.7-h4",
        "PAN-OS 11.2.7-h3",
        "PAN-OS 11.2.7-h2",
        "PAN-OS 11.2.7-h1",
        "PAN-OS 11.2.7",
        "PAN-OS 11.2.6",
        "PAN-OS 11.2.5",
        "PAN-OS 11.2.4-h21",
        "PAN-OS 11.2.4-h20",
        "PAN-OS 11.2.4-h18",
        "PAN-OS 11.2.4-h17",
        "PAN-OS 11.2.4-h15",
        "PAN-OS 11.2.4-h14",
        "PAN-OS 11.2.4-h12",
        "PAN-OS 11.2.4-h11",
        "PAN-OS 11.2.4-h10",
        "PAN-OS 11.2.4-h9",
        "PAN-OS 11.2.4-h8",
        "PAN-OS 11.2.4-h7",
        "PAN-OS 11.2.4-h6",
        "PAN-OS 11.2.4-h5",
        "PAN-OS 11.2.4-h4",
        "PAN-OS 11.2.4-h3",
        "PAN-OS 11.2.4-h2",
        "PAN-OS 11.2.4-h1",
        "PAN-OS 11.2.4",
        "PAN-OS 11.2.3-h5",
        "PAN-OS 11.2.3-h4",
        "PAN-OS 11.2.3-h3",
        "PAN-OS 11.2.3-h2",
        "PAN-OS 11.2.3-h1",
        "PAN-OS 11.2.3",
        "PAN-OS 11.2.2-h2",
        "PAN-OS 11.2.2-h1",
        "PAN-OS 11.2.1-h1",
        "PAN-OS 11.2.1",
        "PAN-OS 11.2.0-h1",
        "PAN-OS 11.2.0",
        "PAN-OS 11.1.16-h2",
        "PAN-OS 11.1.16-h1",
        "PAN-OS 11.1.16",
        "PAN-OS 11.1.15",
        "PAN-OS 11.1.14",
        "PAN-OS 11.1.13-h12",
        "PAN-OS 11.1.13-h11",
        "PAN-OS 11.1.13-h10",
        "PAN-OS 11.1.13-h9",
        "PAN-OS 11.1.13-h8",
        "PAN-OS 11.1.13-h7",
        "PAN-OS 11.1.13-h6",
        "PAN-OS 11.1.13-h5",
        "PAN-OS 11.1.13-h3",
        "PAN-OS 11.1.13-h2",
        "PAN-OS 11.1.13-h1",
        "PAN-OS 11.1.13",
        "PAN-OS 11.1.12",
        "PAN-OS 11.1.11",
        "PAN-OS 11.1.10-h33",
        "PAN-OS 11.1.10-h32",
        "PAN-OS 11.1.10-h30",
        "PAN-OS 11.1.10-h28",
        "PAN-OS 11.1.10-h27",
        "PAN-OS 11.1.10-h26",
        "PAN-OS 11.1.10-h25",
        "PAN-OS 11.1.10-h21",
        "PAN-OS 11.1.10-h12",
        "PAN-OS 11.1.10-h10",
        "PAN-OS 11.1.10-h9",
        "PAN-OS 11.1.10-h7",
        "PAN-OS 11.1.10-h5",
        "PAN-OS 11.1.10-h4",
        "PAN-OS 11.1.10-h1",
        "PAN-OS 11.1.10",
        "PAN-OS 11.1.9",
        "PAN-OS 11.1.8",
        "PAN-OS 11.1.6-h38",
        "PAN-OS 11.1.6-h36",
        "PAN-OS 11.1.6-h35",
        "PAN-OS 11.1.6-h34",
        "PAN-OS 11.1.6-h33",
        "PAN-OS 11.1.6-h32",
        "PAN-OS 11.1.6-h29",
        "PAN-OS 11.1.6-h25",
        "PAN-OS 11.1.6-h23",
        "PAN-OS 11.1.6-h22",
        "PAN-OS 11.1.6-h21",
        "PAN-OS 11.1.6-h20",
        "PAN-OS 11.1.6-h19",
        "PAN-OS 11.1.6-h18",
        "PAN-OS 11.1.6-h17",
        "PAN-OS 11.1.6-h14",
        "PAN-OS 11.1.6-h10",
        "PAN-OS 11.1.6-h7",
        "PAN-OS 11.1.6-h6",
        "PAN-OS 11.1.6-h4",
        "PAN-OS 11.1.6-h3",
        "PAN-OS 11.1.6-h2",
        "PAN-OS 11.1.6-h1",
        "PAN-OS 11.1.6",
        "PAN-OS 11.1.5-h1",
        "PAN-OS 11.1.5",
        "PAN-OS 11.1.4-h36",
        "PAN-OS 11.1.4-h35",
        "PAN-OS 11.1.4-h34",
        "PAN-OS 11.1.4-h33",
        "PAN-OS 11.1.4-h32",
        "PAN-OS 11.1.4-h27",
        "PAN-OS 11.1.4-h25",
        "PAN-OS 11.1.4-h18",
        "PAN-OS 11.1.4-h17",
        "PAN-OS 11.1.4-h15",
        "PAN-OS 11.1.4-h13",
        "PAN-OS 11.1.4-h12",
        "PAN-OS 11.1.4-h11",
        "PAN-OS 11.1.4-h10",
        "PAN-OS 11.1.4-h9",
        "PAN-OS 11.1.4-h8",
        "PAN-OS 11.1.4-h7",
        "PAN-OS 11.1.4-h6",
        "PAN-OS 11.1.4-h5",
        "PAN-OS 11.1.4-h4",
        "PAN-OS 11.1.4-h3",
        "PAN-OS 11.1.4-h2",
        "PAN-OS 11.1.4-h1",
        "PAN-OS 11.1.4",
        "PAN-OS 11.1.3-h13",
        "PAN-OS 11.1.3-h12",
        "PAN-OS 11.1.3-h11",
        "PAN-OS 11.1.3-h10",
        "PAN-OS 11.1.3-h9",
        "PAN-OS 11.1.3-h8",
        "PAN-OS 11.1.3-h7",
        "PAN-OS 11.1.3-h6",
        "PAN-OS 11.1.3-h5",
        "PAN-OS 11.1.3-h4",
        "PAN-OS 11.1.3-h3",
        "PAN-OS 11.1.3-h2",
        "PAN-OS 11.1.3-h1",
        "PAN-OS 11.1.3",
        "PAN-OS 11.1.2-h18",
        "PAN-OS 11.1.2-h17",
        "PAN-OS 11.1.2-h16",
        "PAN-OS 11.1.2-h15",
        "PAN-OS 11.1.2-h14",
        "PAN-OS 11.1.2-h13",
        "PAN-OS 11.1.2-h12",
        "PAN-OS 11.1.2-h11",
        "PAN-OS 11.1.2-h10",
        "PAN-OS 11.1.2-h9",
        "PAN-OS 11.1.2-h8",
        "PAN-OS 11.1.2-h7",
        "PAN-OS 11.1.2-h6",
        "PAN-OS 11.1.2-h5",
        "PAN-OS 11.1.2-h4",
        "PAN-OS 11.1.2-h3",
        "PAN-OS 11.1.2-h2",
        "PAN-OS 11.1.2-h1",
        "PAN-OS 11.1.2",
        "PAN-OS 11.1.1-h2",
        "PAN-OS 11.1.1-h1",
        "PAN-OS 11.1.1",
        "PAN-OS 11.1.0-h4",
        "PAN-OS 11.1.0-h3",
        "PAN-OS 11.1.0-h2",
        "PAN-OS 11.1.0-h1",
        "PAN-OS 11.1.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0318",
    "datePublished": "2026-10-14T20:19:28.773Z",
    "dateReserved": "2025-11-03T20:45:16.597Z",
    "dateUpdated": "2026-10-15T18:48:22.858Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-0319 (GCVE-0-2026-0319)

    Vulnerability from cvelistv5 – Published: 2026-10-14 20:15 – Updated: 2026-10-15 18:53
    VLAI
    Title
    PAN-OS: Improper Input Handling Vulnerability
    Summary
    An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user. Cloud NGFW and Panorama are not affected by this vulnerability.
    Severity
    4.9 (Medium)
    CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-15 18:48 UTC
    CWE
    • CWE-754 - Improper Check for Unusual or Exceptional Conditions
    Assigner
    palo_alto CNA under the mitre root
    CNA scorecard A 95/100 over 96 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Palo Alto Networks Cloud NGFW Unaffected: All (custom)
    		Create a notification for this product.
    Palo Alto Networks PAN-OS Affected: 12.2.0 , < 12.2.4 (custom)
    Affected: 12.1.0 , < 12.1.10-h2 (custom)
    Affected: 11.2.0 , < 11.2.16 (custom)
    Affected: 11.1.0 , < 11.1.16-h3 (custom)
    Affected: 10.2.0 , < 10.2.18-h12 (custom)
        cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h33:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h32:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h30:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h28:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h27:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h26:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h25:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h38:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h36:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h35:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h34:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h33:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h32:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h36:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h35:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h34:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h33:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h25:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h24:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h23:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h22:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h40:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h39:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h37:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h36:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h37:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h36:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h35:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h34:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h32:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h24:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h23:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h22:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h20:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h19:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h16:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*
    		Create a notification for this product.
    Palo Alto Networks Prisma Access Affected: 12.1.0 , < 12.1.7-h8 (custom)
    Affected: 11.2.0 , < 11.2.7-h21 (custom)
    Affected: 10.2.0 , < 10.2.10-h41 (custom)
        cpe:2.3:a:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:*
        cpe:2.3:a:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:*
        cpe:2.3:a:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Date Public
    2026-10-14 16:00
    Credits
    Ben Nott (internal reporter)
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0319",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T18:48:44.598382Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T18:53:43.155Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Cloud NGFW",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h33:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h32:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h30:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h28:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h27:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h26:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h25:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h38:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h35:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h34:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h33:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h32:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h35:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h34:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h33:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h25:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h24:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h22:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h40:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h39:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h37:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h37:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h35:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h34:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h32:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h24:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h22:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h20:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h19:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h16:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "PAN-OS",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.2.4",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.2.4",
              "status": "affected",
              "version": "12.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "12.1.10-h2",
                  "status": "unaffected"
                },
                {
                  "at": "12.1.7-h8",
                  "status": "unaffected"
                },
                {
                  "at": "12.1.4-h12",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.1.10-h2",
              "status": "affected",
              "version": "12.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.2.16",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.13-h3",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.10-h15",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.7-h21",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.4-h22",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.2.16",
              "status": "affected",
              "version": "11.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.1.16-h3",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.13-h15",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.10-h35",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.7-h11",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.6-h39",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.4-h37",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.1.16-h3",
              "status": "affected",
              "version": "11.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "10.2.18-h12",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.16-h11",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.13-h26",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.10-h41",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.7-h38",
                  "status": "unaffected"
                }
              ],
              "lessThan": "10.2.18-h12",
              "status": "affected",
              "version": "10.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Prisma Access",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.1.7-h8",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.1.7-h8",
              "status": "affected",
              "version": "12.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.2.7-h21",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.2.7-h21",
              "status": "affected",
              "version": "11.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "10.2.10-h41",
                  "status": "unaffected"
                }
              ],
              "lessThan": "10.2.10-h41",
              "status": "affected",
              "version": "10.2.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cspan\u003eNo special configuration is required to be affected by this issue.\u003c/span\u003e\u003c/p\u003e"
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:cloud_ngfw:all:*:*:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.2.4",
                  "versionStartIncluding": "12.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.1.10-h2",
                  "versionStartIncluding": "12.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.2.16",
                  "versionStartIncluding": "11.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.1.16-h3",
                  "versionStartIncluding": "11.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.2.18-h12",
                  "versionStartIncluding": "10.2.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.1.7-h8",
                  "versionStartIncluding": "12.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.2.7-h21",
                  "versionStartIncluding": "11.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.2.10-h41",
                  "versionStartIncluding": "10.2.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Ben Nott (internal reporter)"
        }
      ],
      "datePublic": "2026-10-14T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cspan\u003eAn improper input handling vulnerability in the GlobalProtect\u2122 gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user. \u003c/span\u003e\u003cb\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003c/b\u003e\u003cspan\u003eCloud NGFW and Panorama are not affected by this vulnerability.\u003c/span\u003e  \u003cbr\u003e\u003c/p\u003e"
            }
          ],
          "value": "An improper input handling vulnerability in the GlobalProtect\u2122 gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user. \n\nCloud NGFW and Panorama are not affected by this vulnerability."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-153",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-153 Input Data Manipulation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-754",
              "description": "CWE-754 Improper Check for Unusual or Exceptional Conditions",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T20:15:32.174Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "name": "PAN-OS Security Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0319"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 12.2\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.2.0 through 12.2.3\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.2.4 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 12.1\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.1.8 through 12.1.10-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.1.10-h2 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.1.5 through 12.1.7-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.1.7-h8 or 12.1.10-h2 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.1.2 through 12.1.4-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.1.4-h12 or 12.1.10-h2 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 11.2\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.14 through 11.2.15\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.11 through 11.2.13-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.13-h3 or 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.8 through 11.2.10-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.10-h15 or 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.5 through 11.2.7-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.7-h21 or 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.0 through 11.2.4-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.4-h22 or 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 11.1\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.14 through 11.1.16-h* \u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.11 through 11.1.13-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.13-h15 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.8 through 11.1.10-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.10-h35 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.7 through 11.1.7-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.7-h11 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.5 through 11.1.6-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.6-h39 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.0 through 11.1.4-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.4-h37 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 10.2\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.17 through 10.2.18-h* \u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.14 through 10.2.16-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.16-h11 or 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.11 through 10.2.13-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.13-h26 or 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.8 through 10.2.10-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.10-h41 or 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.0 through 10.2.7-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.7-h38 or 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003ePrisma Access needs to be upgraded in accordance with product status table"
            }
          ],
          "value": "Version\nMinor Version\nSuggested Solution\n\n                                PAN-OS 12.2\n\n                                12.2.0 through 12.2.3\n                                Upgrade to 12.2.4 or later.\n                            \n                                PAN-OS 12.1\n\n                                12.1.8 through 12.1.10-h*\n                                Upgrade to 12.1.10-h2 or later.\n                            \n                                \n                                12.1.5 through 12.1.7-h*\n                                Upgrade to 12.1.7-h8 or 12.1.10-h2 or later.\n                            \n                                \n                                12.1.2 through 12.1.4-h*\n                                Upgrade to 12.1.4-h12 or 12.1.10-h2 or later.\n                            \n                                PAN-OS 11.2\n\n                                11.2.14 through 11.2.15\n                                Upgrade to 11.2.16 or later.\n                            \n                                \n                                11.2.11 through 11.2.13-h*\n                                Upgrade to 11.2.13-h3 or 11.2.16 or later.\n                            \n                                \n                                11.2.8 through 11.2.10-h*\n                                Upgrade to 11.2.10-h15 or 11.2.16 or later.\n                            \n                                \n                                11.2.5 through 11.2.7-h*\n                                Upgrade to 11.2.7-h21 or 11.2.16 or later.\n                            \n                                \n                                11.2.0 through 11.2.4-h*\n                                Upgrade to 11.2.4-h22 or 11.2.16 or later.\n                            \n                                PAN-OS 11.1\n\n                                11.1.14 through 11.1.16-h* \n                                Upgrade to 11.1.16-h3 or later.\n                            \n                                \n                                11.1.11 through 11.1.13-h*\n                                Upgrade to 11.1.13-h15 or 11.1.16-h3 or later.\n                            \n                                \n                                11.1.8 through 11.1.10-h*\n                                Upgrade to 11.1.10-h35 or 11.1.16-h3 or later.\n                            \n                                \n                                11.1.7 through 11.1.7-h*\n                                Upgrade to 11.1.7-h11 or 11.1.16-h3 or later.\n                            \n                                \n                                11.1.5 through 11.1.6-h*\n                                Upgrade to 11.1.6-h39 or 11.1.16-h3 or later.\n                            \n                                \n                                11.1.0 through 11.1.4-h*\n                                Upgrade to 11.1.4-h37 or 11.1.16-h3 or later.\n                            \n                                PAN-OS 10.2\n\n                                10.2.17 through 10.2.18-h* \n                                Upgrade to 10.2.18-h12 or later.\n                            \n                                \n                                10.2.14 through 10.2.16-h*\n                                Upgrade to 10.2.16-h11 or 10.2.18-h12 or later.\n                            \n                                \n                                10.2.11 through 10.2.13-h*\n                                Upgrade to 10.2.13-h26 or 10.2.18-h12 or later.\n                            \n                                \n                                10.2.8 through 10.2.10-h*\n                                Upgrade to 10.2.10-h41 or 10.2.18-h12 or later.\n                            \n                                \n                                10.2.0 through 10.2.7-h*\n                                Upgrade to 10.2.7-h38 or 10.2.18-h12 or later.\n                            Prisma Access needs to be upgraded in accordance with product status table"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-14T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "PAN-OS: Improper Input Handling Vulnerability",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNo known workarounds exist for this issue.\u0026nbsp;\u003c/p\u003e"
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_affectedList": [
        "PAN-OS 12.2.3",
        "PAN-OS 12.2.2",
        "PAN-OS 12.1.10",
        "PAN-OS 12.1.9",
        "PAN-OS 12.1.8",
        "PAN-OS 12.1.7-h6",
        "PAN-OS 12.1.7-h5",
        "PAN-OS 12.1.7-h3",
        "PAN-OS 12.1.7-h2",
        "PAN-OS 12.1.7-h1",
        "PAN-OS 12.1.7",
        "PAN-OS 12.1.6",
        "PAN-OS 12.1.5",
        "PAN-OS 12.1.4-h11",
        "PAN-OS 12.1.4-h10",
        "PAN-OS 12.1.4-h9",
        "PAN-OS 12.1.4-h8",
        "PAN-OS 12.1.4-h7",
        "PAN-OS 12.1.4-h6",
        "PAN-OS 12.1.4-h5",
        "PAN-OS 12.1.4-h3",
        "PAN-OS 12.1.4-h2",
        "PAN-OS 12.1.4",
        "PAN-OS 12.1.3-h3",
        "PAN-OS 12.1.3-h1",
        "PAN-OS 12.1.3",
        "PAN-OS 12.1.2",
        "PAN-OS 11.2.15",
        "PAN-OS 11.2.13-h2",
        "PAN-OS 11.2.13-h1",
        "PAN-OS 11.2.13",
        "PAN-OS 11.2.12",
        "PAN-OS 11.2.11",
        "PAN-OS 11.2.10-h14",
        "PAN-OS 11.2.10-h13",
        "PAN-OS 11.2.10-h12",
        "PAN-OS 11.2.10-h10",
        "PAN-OS 11.2.10-h9",
        "PAN-OS 11.2.10-h8",
        "PAN-OS 11.2.10-h7",
        "PAN-OS 11.2.10-h6",
        "PAN-OS 11.2.10-h5",
        "PAN-OS 11.2.10-h4",
        "PAN-OS 11.2.10-h3",
        "PAN-OS 11.2.10-h2",
        "PAN-OS 11.2.10-h1",
        "PAN-OS 11.2.10",
        "PAN-OS 11.2.9",
        "PAN-OS 11.2.8",
        "PAN-OS 11.2.7-h20",
        "PAN-OS 11.2.7-h19",
        "PAN-OS 11.2.7-h18",
        "PAN-OS 11.2.7-h17",
        "PAN-OS 11.2.7-h16",
        "PAN-OS 11.2.7-h15",
        "PAN-OS 11.2.7-h14",
        "PAN-OS 11.2.7-h13",
        "PAN-OS 11.2.7-h12",
        "PAN-OS 11.2.7-h11",
        "PAN-OS 11.2.7-h10",
        "PAN-OS 11.2.7-h8",
        "PAN-OS 11.2.7-h7",
        "PAN-OS 11.2.7-h4",
        "PAN-OS 11.2.7-h3",
        "PAN-OS 11.2.7-h2",
        "PAN-OS 11.2.7-h1",
        "PAN-OS 11.2.7",
        "PAN-OS 11.2.6",
        "PAN-OS 11.2.5",
        "PAN-OS 11.2.4-h21",
        "PAN-OS 11.2.4-h20",
        "PAN-OS 11.2.4-h18",
        "PAN-OS 11.2.4-h17",
        "PAN-OS 11.2.4-h15",
        "PAN-OS 11.2.4-h14",
        "PAN-OS 11.2.4-h12",
        "PAN-OS 11.2.4-h11",
        "PAN-OS 11.2.4-h10",
        "PAN-OS 11.2.4-h9",
        "PAN-OS 11.2.4-h8",
        "PAN-OS 11.2.4-h7",
        "PAN-OS 11.2.4-h6",
        "PAN-OS 11.2.4-h5",
        "PAN-OS 11.2.4-h4",
        "PAN-OS 11.2.4-h3",
        "PAN-OS 11.2.4-h2",
        "PAN-OS 11.2.4-h1",
        "PAN-OS 11.2.4",
        "PAN-OS 11.2.3-h5",
        "PAN-OS 11.2.3-h4",
        "PAN-OS 11.2.3-h3",
        "PAN-OS 11.2.3-h2",
        "PAN-OS 11.2.3-h1",
        "PAN-OS 11.2.3",
        "PAN-OS 11.2.2-h2",
        "PAN-OS 11.2.2-h1",
        "PAN-OS 11.2.1-h1",
        "PAN-OS 11.2.1",
        "PAN-OS 11.2.0-h1",
        "PAN-OS 11.2.0",
        "PAN-OS 11.1.16-h2",
        "PAN-OS 11.1.16-h1",
        "PAN-OS 11.1.16",
        "PAN-OS 11.1.15",
        "PAN-OS 11.1.14",
        "PAN-OS 11.1.13-h12",
        "PAN-OS 11.1.13-h11",
        "PAN-OS 11.1.13-h10",
        "PAN-OS 11.1.13-h9",
        "PAN-OS 11.1.13-h8",
        "PAN-OS 11.1.13-h7",
        "PAN-OS 11.1.13-h6",
        "PAN-OS 11.1.13-h5",
        "PAN-OS 11.1.13-h3",
        "PAN-OS 11.1.13-h2",
        "PAN-OS 11.1.13-h1",
        "PAN-OS 11.1.13",
        "PAN-OS 11.1.12",
        "PAN-OS 11.1.11",
        "PAN-OS 11.1.10-h33",
        "PAN-OS 11.1.10-h32",
        "PAN-OS 11.1.10-h30",
        "PAN-OS 11.1.10-h28",
        "PAN-OS 11.1.10-h27",
        "PAN-OS 11.1.10-h26",
        "PAN-OS 11.1.10-h25",
        "PAN-OS 11.1.10-h21",
        "PAN-OS 11.1.10-h12",
        "PAN-OS 11.1.10-h10",
        "PAN-OS 11.1.10-h9",
        "PAN-OS 11.1.10-h7",
        "PAN-OS 11.1.10-h5",
        "PAN-OS 11.1.10-h4",
        "PAN-OS 11.1.10-h1",
        "PAN-OS 11.1.10",
        "PAN-OS 11.1.9",
        "PAN-OS 11.1.8",
        "PAN-OS 11.1.6-h38",
        "PAN-OS 11.1.6-h36",
        "PAN-OS 11.1.6-h35",
        "PAN-OS 11.1.6-h34",
        "PAN-OS 11.1.6-h33",
        "PAN-OS 11.1.6-h32",
        "PAN-OS 11.1.6-h29",
        "PAN-OS 11.1.6-h25",
        "PAN-OS 11.1.6-h23",
        "PAN-OS 11.1.6-h22",
        "PAN-OS 11.1.6-h21",
        "PAN-OS 11.1.6-h20",
        "PAN-OS 11.1.6-h19",
        "PAN-OS 11.1.6-h18",
        "PAN-OS 11.1.6-h17",
        "PAN-OS 11.1.6-h14",
        "PAN-OS 11.1.6-h10",
        "PAN-OS 11.1.6-h7",
        "PAN-OS 11.1.6-h6",
        "PAN-OS 11.1.6-h4",
        "PAN-OS 11.1.6-h3",
        "PAN-OS 11.1.6-h2",
        "PAN-OS 11.1.6-h1",
        "PAN-OS 11.1.6",
        "PAN-OS 11.1.5-h1",
        "PAN-OS 11.1.5",
        "PAN-OS 11.1.4-h36",
        "PAN-OS 11.1.4-h35",
        "PAN-OS 11.1.4-h34",
        "PAN-OS 11.1.4-h33",
        "PAN-OS 11.1.4-h32",
        "PAN-OS 11.1.4-h27",
        "PAN-OS 11.1.4-h25",
        "PAN-OS 11.1.4-h18",
        "PAN-OS 11.1.4-h17",
        "PAN-OS 11.1.4-h15",
        "PAN-OS 11.1.4-h13",
        "PAN-OS 11.1.4-h12",
        "PAN-OS 11.1.4-h11",
        "PAN-OS 11.1.4-h10",
        "PAN-OS 11.1.4-h9",
        "PAN-OS 11.1.4-h8",
        "PAN-OS 11.1.4-h7",
        "PAN-OS 11.1.4-h6",
        "PAN-OS 11.1.4-h5",
        "PAN-OS 11.1.4-h4",
        "PAN-OS 11.1.4-h3",
        "PAN-OS 11.1.4-h2",
        "PAN-OS 11.1.4-h1",
        "PAN-OS 11.1.4",
        "PAN-OS 11.1.3-h13",
        "PAN-OS 11.1.3-h12",
        "PAN-OS 11.1.3-h11",
        "PAN-OS 11.1.3-h10",
        "PAN-OS 11.1.3-h9",
        "PAN-OS 11.1.3-h8",
        "PAN-OS 11.1.3-h7",
        "PAN-OS 11.1.3-h6",
        "PAN-OS 11.1.3-h5",
        "PAN-OS 11.1.3-h4",
        "PAN-OS 11.1.3-h3",
        "PAN-OS 11.1.3-h2",
        "PAN-OS 11.1.3-h1",
        "PAN-OS 11.1.3",
        "PAN-OS 11.1.2-h18",
        "PAN-OS 11.1.2-h17",
        "PAN-OS 11.1.2-h16",
        "PAN-OS 11.1.2-h15",
        "PAN-OS 11.1.2-h14",
        "PAN-OS 11.1.2-h13",
        "PAN-OS 11.1.2-h12",
        "PAN-OS 11.1.2-h11",
        "PAN-OS 11.1.2-h10",
        "PAN-OS 11.1.2-h9",
        "PAN-OS 11.1.2-h8",
        "PAN-OS 11.1.2-h7",
        "PAN-OS 11.1.2-h6",
        "PAN-OS 11.1.2-h5",
        "PAN-OS 11.1.2-h4",
        "PAN-OS 11.1.2-h3",
        "PAN-OS 11.1.2-h2",
        "PAN-OS 11.1.2-h1",
        "PAN-OS 11.1.2",
        "PAN-OS 11.1.1-h2",
        "PAN-OS 11.1.1-h1",
        "PAN-OS 11.1.1",
        "PAN-OS 11.1.0-h4",
        "PAN-OS 11.1.0-h3",
        "PAN-OS 11.1.0-h2",
        "PAN-OS 11.1.0-h1",
        "PAN-OS 11.1.0",
        "PAN-OS 10.2.18-h10",
        "PAN-OS 10.2.18-h9",
        "PAN-OS 10.2.18-h8",
        "PAN-OS 10.2.18-h7",
        "PAN-OS 10.2.18-h6",
        "PAN-OS 10.2.18-h5",
        "PAN-OS 10.2.18-h1",
        "PAN-OS 10.2.18",
        "PAN-OS 10.2.17",
        "PAN-OS 10.2.16-h10",
        "PAN-OS 10.2.16-h9",
        "PAN-OS 10.2.16-h8",
        "PAN-OS 10.2.16-h7",
        "PAN-OS 10.2.16-h6",
        "PAN-OS 10.2.16-h4",
        "PAN-OS 10.2.16-h1",
        "PAN-OS 10.2.16",
        "PAN-OS 10.2.15",
        "PAN-OS 10.2.14-h1",
        "PAN-OS 10.2.14",
        "PAN-OS 10.2.13-h24",
        "PAN-OS 10.2.13-h23",
        "PAN-OS 10.2.13-h22",
        "PAN-OS 10.2.13-h21",
        "PAN-OS 10.2.13-h18",
        "PAN-OS 10.2.13-h16",
        "PAN-OS 10.2.13-h15",
        "PAN-OS 10.2.13-h10",
        "PAN-OS 10.2.13-h7",
        "PAN-OS 10.2.13-h5",
        "PAN-OS 10.2.13-h4",
        "PAN-OS 10.2.13-h3",
        "PAN-OS 10.2.13-h2",
        "PAN-OS 10.2.13-h1",
        "PAN-OS 10.2.13",
        "PAN-OS 10.2.12-h6",
        "PAN-OS 10.2.12-h5",
        "PAN-OS 10.2.12-h4",
        "PAN-OS 10.2.12-h3",
        "PAN-OS 10.2.12-h2",
        "PAN-OS 10.2.12-h1",
        "PAN-OS 10.2.12",
        "PAN-OS 10.2.11-h13",
        "PAN-OS 10.2.11-h12",
        "PAN-OS 10.2.11-h11",
        "PAN-OS 10.2.11-h10",
        "PAN-OS 10.2.11-h9",
        "PAN-OS 10.2.11-h8",
        "PAN-OS 10.2.11-h7",
        "PAN-OS 10.2.11-h6",
        "PAN-OS 10.2.11-h5",
        "PAN-OS 10.2.11-h4",
        "PAN-OS 10.2.11-h3",
        "PAN-OS 10.2.11-h2",
        "PAN-OS 10.2.11-h1",
        "PAN-OS 10.2.11",
        "PAN-OS 10.2.10-h40",
        "PAN-OS 10.2.10-h39",
        "PAN-OS 10.2.10-h37",
        "PAN-OS 10.2.10-h36",
        "PAN-OS 10.2.10-h31",
        "PAN-OS 10.2.10-h30",
        "PAN-OS 10.2.10-h27",
        "PAN-OS 10.2.10-h26",
        "PAN-OS 10.2.10-h23",
        "PAN-OS 10.2.10-h21",
        "PAN-OS 10.2.10-h18",
        "PAN-OS 10.2.10-h17",
        "PAN-OS 10.2.10-h14",
        "PAN-OS 10.2.10-h13",
        "PAN-OS 10.2.10-h12",
        "PAN-OS 10.2.10-h11",
        "PAN-OS 10.2.10-h10",
        "PAN-OS 10.2.10-h9",
        "PAN-OS 10.2.10-h8",
        "PAN-OS 10.2.10-h7",
        "PAN-OS 10.2.10-h6",
        "PAN-OS 10.2.10-h5",
        "PAN-OS 10.2.10-h4",
        "PAN-OS 10.2.10-h3",
        "PAN-OS 10.2.10-h2",
        "PAN-OS 10.2.10-h1",
        "PAN-OS 10.2.10",
        "PAN-OS 10.2.9-h21",
        "PAN-OS 10.2.9-h20",
        "PAN-OS 10.2.9-h19",
        "PAN-OS 10.2.9-h18",
        "PAN-OS 10.2.9-h17",
        "PAN-OS 10.2.9-h16",
        "PAN-OS 10.2.9-h15",
        "PAN-OS 10.2.9-h14",
        "PAN-OS 10.2.9-h13",
        "PAN-OS 10.2.9-h12",
        "PAN-OS 10.2.9-h11",
        "PAN-OS 10.2.9-h10",
        "PAN-OS 10.2.9-h9",
        "PAN-OS 10.2.9-h8",
        "PAN-OS 10.2.9-h7",
        "PAN-OS 10.2.9-h6",
        "PAN-OS 10.2.9-h5",
        "PAN-OS 10.2.9-h4",
        "PAN-OS 10.2.9-h3",
        "PAN-OS 10.2.9-h2",
        "PAN-OS 10.2.9-h1",
        "PAN-OS 10.2.9",
        "PAN-OS 10.2.8-h21",
        "PAN-OS 10.2.8-h20",
        "PAN-OS 10.2.8-h19",
        "PAN-OS 10.2.8-h18",
        "PAN-OS 10.2.8-h17",
        "PAN-OS 10.2.8-h16",
        "PAN-OS 10.2.8-h15",
        "PAN-OS 10.2.8-h14",
        "PAN-OS 10.2.8-h13",
        "PAN-OS 10.2.8-h12",
        "PAN-OS 10.2.8-h11",
        "PAN-OS 10.2.8-h10",
        "PAN-OS 10.2.8-h9",
        "PAN-OS 10.2.8-h8",
        "PAN-OS 10.2.8-h7",
        "PAN-OS 10.2.8-h6",
        "PAN-OS 10.2.8-h5",
        "PAN-OS 10.2.8-h4",
        "PAN-OS 10.2.8-h3",
        "PAN-OS 10.2.8-h2",
        "PAN-OS 10.2.8-h1",
        "PAN-OS 10.2.8",
        "PAN-OS 10.2.7-h37",
        "PAN-OS 10.2.7-h36",
        "PAN-OS 10.2.7-h35",
        "PAN-OS 10.2.7-h34",
        "PAN-OS 10.2.7-h32",
        "PAN-OS 10.2.7-h24",
        "PAN-OS 10.2.7-h23",
        "PAN-OS 10.2.7-h22",
        "PAN-OS 10.2.7-h21",
        "PAN-OS 10.2.7-h20",
        "PAN-OS 10.2.7-h19",
        "PAN-OS 10.2.7-h18",
        "PAN-OS 10.2.7-h17",
        "PAN-OS 10.2.7-h16",
        "PAN-OS 10.2.7-h15",
        "PAN-OS 10.2.7-h14",
        "PAN-OS 10.2.7-h13",
        "PAN-OS 10.2.7-h12",
        "PAN-OS 10.2.7-h11",
        "PAN-OS 10.2.7-h10",
        "PAN-OS 10.2.7-h9",
        "PAN-OS 10.2.7-h8",
        "PAN-OS 10.2.7-h7",
        "PAN-OS 10.2.7-h6",
        "PAN-OS 10.2.7-h5",
        "PAN-OS 10.2.7-h4",
        "PAN-OS 10.2.7-h3",
        "PAN-OS 10.2.7-h2",
        "PAN-OS 10.2.7-h1",
        "PAN-OS 10.2.7",
        "PAN-OS 10.2.6-h6",
        "PAN-OS 10.2.6-h5",
        "PAN-OS 10.2.6-h4",
        "PAN-OS 10.2.6-h3",
        "PAN-OS 10.2.6-h2",
        "PAN-OS 10.2.6-h1",
        "PAN-OS 10.2.6",
        "PAN-OS 10.2.5-h9",
        "PAN-OS 10.2.5-h8",
        "PAN-OS 10.2.5-h7",
        "PAN-OS 10.2.5-h6",
        "PAN-OS 10.2.5-h5",
        "PAN-OS 10.2.5-h4",
        "PAN-OS 10.2.5-h3",
        "PAN-OS 10.2.5-h2",
        "PAN-OS 10.2.5-h1",
        "PAN-OS 10.2.5",
        "PAN-OS 10.2.4-h32",
        "PAN-OS 10.2.4-h31",
        "PAN-OS 10.2.4-h30",
        "PAN-OS 10.2.4-h29",
        "PAN-OS 10.2.4-h28",
        "PAN-OS 10.2.4-h27",
        "PAN-OS 10.2.4-h26",
        "PAN-OS 10.2.4-h25",
        "PAN-OS 10.2.4-h24",
        "PAN-OS 10.2.4-h23",
        "PAN-OS 10.2.4-h22",
        "PAN-OS 10.2.4-h21",
        "PAN-OS 10.2.4-h20",
        "PAN-OS 10.2.4-h19",
        "PAN-OS 10.2.4-h18",
        "PAN-OS 10.2.4-h17",
        "PAN-OS 10.2.4-h16",
        "PAN-OS 10.2.4-h15",
        "PAN-OS 10.2.4-h14",
        "PAN-OS 10.2.4-h13",
        "PAN-OS 10.2.4-h12",
        "PAN-OS 10.2.4-h11",
        "PAN-OS 10.2.4-h10",
        "PAN-OS 10.2.4-h9",
        "PAN-OS 10.2.4-h8",
        "PAN-OS 10.2.4-h7",
        "PAN-OS 10.2.4-h6",
        "PAN-OS 10.2.4-h5",
        "PAN-OS 10.2.4-h4",
        "PAN-OS 10.2.4-h3",
        "PAN-OS 10.2.4-h2",
        "PAN-OS 10.2.4-h1",
        "PAN-OS 10.2.4",
        "PAN-OS 10.2.3-h14",
        "PAN-OS 10.2.3-h13",
        "PAN-OS 10.2.3-h12",
        "PAN-OS 10.2.3-h11",
        "PAN-OS 10.2.3-h10",
        "PAN-OS 10.2.3-h9",
        "PAN-OS 10.2.3-h8",
        "PAN-OS 10.2.3-h7",
        "PAN-OS 10.2.3-h6",
        "PAN-OS 10.2.3-h5",
        "PAN-OS 10.2.3-h4",
        "PAN-OS 10.2.3-h3",
        "PAN-OS 10.2.3-h2",
        "PAN-OS 10.2.3-h1",
        "PAN-OS 10.2.3",
        "PAN-OS 10.2.2-h6",
        "PAN-OS 10.2.2-h5",
        "PAN-OS 10.2.2-h4",
        "PAN-OS 10.2.2-h3",
        "PAN-OS 10.2.2-h2",
        "PAN-OS 10.2.2-h1",
        "PAN-OS 10.2.2",
        "PAN-OS 10.2.1-h3",
        "PAN-OS 10.2.1-h2",
        "PAN-OS 10.2.1-h1",
        "PAN-OS 10.2.1",
        "PAN-OS 10.2.0-h4",
        "PAN-OS 10.2.0-h3",
        "PAN-OS 10.2.0-h2",
        "PAN-OS 10.2.0-h1",
        "PAN-OS 10.2.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0319",
    "datePublished": "2026-10-14T20:15:32.174Z",
    "dateReserved": "2025-11-03T20:45:17.582Z",
    "dateUpdated": "2026-10-15T18:53:43.155Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-0320 (GCVE-0-2026-0320)

    Vulnerability from cvelistv5 – Published: 2026-10-14 20:09 – Updated: 2026-10-16 03:56
    VLAI
    Title
    PAN-OS: Authenticated Admin Command Injection Vulnerability
    Summary
    A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS management interface. The security risk posed by this issue is significantly minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma® Access are not affected by this vulnerability.
    Severity
    6.1 (Medium)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
    5.7 (Medium)
    CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-15 00:00 UTC
    CWE
    • CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
    Assigner
    palo_alto CNA under the mitre root
    CNA scorecard A 95/100 over 96 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Palo Alto Networks Cloud NGFW Unaffected: All (custom)
    		Create a notification for this product.
    Palo Alto Networks PAN-OS Affected: 12.2.0 , < 12.2.4 (custom)
    Affected: 12.1.0 , < 12.1.10-h2 (custom)
    Affected: 11.2.0 , < 11.2.16 (custom)
    Affected: 11.1.0 , < 11.1.16-h3 (custom)
    Affected: 10.2.0 , < 10.2.18-h12 (custom)
        cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h33:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h32:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h30:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h28:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h27:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h26:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h25:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h38:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h36:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h35:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h34:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h33:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h32:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h36:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h35:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h34:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h33:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h25:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h24:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h23:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h22:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h40:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h39:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h37:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h36:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h37:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h36:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h35:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h34:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h32:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h24:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h23:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h22:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h20:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h19:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h16:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*
    		Create a notification for this product.
    Palo Alto Networks Prisma Access Unaffected: All , < 12.1.7-h8 (custom)
    		Create a notification for this product.
    Date Public
    2026-10-14 16:00
    Credits
    Daniel Voce (internal reporter)
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0320",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-16T03:56:59.391Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Cloud NGFW",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h33:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h32:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h30:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h28:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h27:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h26:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h25:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h38:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h35:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h34:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h33:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h32:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h35:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h34:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h33:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h25:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h24:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h22:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h40:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h39:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h37:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h37:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h35:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h34:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h32:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h24:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h22:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h20:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h19:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h16:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "PAN-OS",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.2.4",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.2.4",
              "status": "affected",
              "version": "12.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "12.1.10-h2",
                  "status": "unaffected"
                },
                {
                  "at": "12.1.7-h8",
                  "status": "unaffected"
                },
                {
                  "at": "12.1.4-h12",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.1.10-h2",
              "status": "affected",
              "version": "12.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.2.16",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.13-h3",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.10-h15",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.7-h21",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.4-h22",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.2.16",
              "status": "affected",
              "version": "11.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.1.16-h3",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.13-h15",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.10-h35",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.7-h11",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.6-h39",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.4-h37",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.1.16-h3",
              "status": "affected",
              "version": "11.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "10.2.18-h12",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.16-h11",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.13-h26",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.10-h41",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.7-h38",
                  "status": "unaffected"
                }
              ],
              "lessThan": "10.2.18-h12",
              "status": "affected",
              "version": "10.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Prisma Access",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.1.7-h8",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.1.7-h8",
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.2.4",
                  "versionStartIncluding": "12.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.1.10-h2",
                  "versionStartIncluding": "12.1.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.1.7-h8",
                  "versionStartIncluding": "12.1.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.1.4-h12",
                  "versionStartIncluding": "12.1.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.2.16",
                  "versionStartIncluding": "11.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.2.13-h3",
                  "versionStartIncluding": "11.2.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.2.10-h15",
                  "versionStartIncluding": "11.2.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.2.7-h21",
                  "versionStartIncluding": "11.2.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.2.4-h22",
                  "versionStartIncluding": "11.2.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.1.16-h3",
                  "versionStartIncluding": "11.1.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.1.13-h15",
                  "versionStartIncluding": "11.1.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.1.10-h35",
                  "versionStartIncluding": "11.1.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.1.7-h11",
                  "versionStartIncluding": "11.1.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.1.6-h39",
                  "versionStartIncluding": "11.1.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.1.4-h37",
                  "versionStartIncluding": "11.1.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.2.18-h12",
                  "versionStartIncluding": "10.2.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.2.16-h11",
                  "versionStartIncluding": "10.2.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.2.13-h26",
                  "versionStartIncluding": "10.2.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.2.10-h41",
                  "versionStartIncluding": "10.2.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.2.7-h38",
                  "versionStartIncluding": "10.2.7",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Daniel Voce (internal reporter)"
        }
      ],
      "datePublic": "2026-10-14T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cspan\u003eA command injection vulnerability in Palo Alto Networks PAN-OS\u00ae software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS management interface.\u003c/span\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003c/p\u003e\u003cb\u003e\u003c/b\u003e\u003cp\u003e\u003cspan\u003eThe security risk posed by this issue is significantly minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended\u0026nbsp;\u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431\"\u003e\u003cspan\u003ebest practice deployment guidelines\u003c/span\u003e\u003c/a\u003e\u003cspan\u003e.\u003c/span\u003e\u003c/p\u003e\u003cp\u003e\u003cspan\u003eThis issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).\u003c/span\u003e\u003c/p\u003e\u003cp\u003e\u003cspan\u003eCloud NGFW and Prisma\u00ae Access are not affected by this vulnerability.\u003c/span\u003e\u003c/p\u003e"
            }
          ],
          "value": "A command injection vulnerability in Palo Alto Networks PAN-OS\u00ae software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS management interface.\n\n\n\n\nThe security risk posed by this issue is significantly minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended\u00a0 best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .\n\n\n\nThis issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).\n\n\n\nCloud NGFW and Prisma\u00ae Access are not affected by this vulnerability."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-248",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-248 Command Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "The risk is highest when you allow access to the management interface from external IP addresses on the internet. Our recommendation is to remediate as soon as possible."
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 5.7,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "You can reduce the risk of exploitation by restricting access to a jump box that is the only system allowed to access the management interface. This will ensure that attacks can succeed only if they obtain privileged access through those specified IP addresses."
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T20:09:49.697Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0320"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 12.2\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.2.0 through 12.2.3\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.2.4 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 12.1\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.1.8 through 12.1.10-h* \u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.1.10-h2 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.1.5 through 12.1.7-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.1.7-h8 or 12.1.10-h2 or later.\u003cbr\u003e\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.1.2 through 12.1.4-h*\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.1.4-h12 or 12.1.10-h2 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 11.2\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.14 through 11.2.15 \u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.11 through 11.2.13-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.13-h3 or 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.8 through 11.2.10-h*\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.10-h15 or 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.5 through 11.2.7-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.7-h21 or 11.2.16 or later.\u003cbr\u003e\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.0 through 11.2.4-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.4-h22 or 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 11.1\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.14 through 11.1.16-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.11 through 11.1.13-h*\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.13-h15 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.8 through 11.1.10-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.10-h35 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.7 through 11.1.7-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.7-h11 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.5 through 11.1.6-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.6-h39 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.0 through 11.1.4-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.4-h37 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 10.2\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.17 through 10.2.18-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.14 through 10.2.16-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.16-h11 or 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.11 through 10.2.13-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.13-h26 or 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.8 through 10.2.10-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.10-h41 or 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.0 through 10.2.7-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.7-h38 or 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "Version\nMinor Version\nSuggested Solution\n\n                                PAN-OS 12.2\n\n                                12.2.0 through 12.2.3\n                                Upgrade to 12.2.4 or later.\n                            \n                                PAN-OS 12.1\n\n                                12.1.8 through 12.1.10-h* \n                                Upgrade to 12.1.10-h2 or later.\n                            \n                                \n                                12.1.5 through 12.1.7-h*\n                                Upgrade to 12.1.7-h8 or 12.1.10-h2 or later.\n\n                            \n                                \n                                12.1.2 through 12.1.4-h*\n\n                                Upgrade to 12.1.4-h12 or 12.1.10-h2 or later.\n                            \n                                PAN-OS 11.2\n\n                                11.2.14 through 11.2.15 \n                                Upgrade to 11.2.16 or later.\n                            \n                                \n                                11.2.11 through 11.2.13-h*\n                                Upgrade to 11.2.13-h3 or 11.2.16 or later.\n                            \n                                \n                                11.2.8 through 11.2.10-h*\n\n                                Upgrade to 11.2.10-h15 or 11.2.16 or later.\n                            \n                                \n                                11.2.5 through 11.2.7-h*\n                                Upgrade to 11.2.7-h21 or 11.2.16 or later.\n\n                            \n                                \n                                11.2.0 through 11.2.4-h*\n                                Upgrade to 11.2.4-h22 or 11.2.16 or later.\n                            \n                                PAN-OS 11.1\n\n                                11.1.14 through 11.1.16-h*\n                                Upgrade to 11.1.16-h3 or later.\n                            \n                                \n                                11.1.11 through 11.1.13-h*\n\n                                Upgrade to 11.1.13-h15 or 11.1.16-h3 or later.\n                            \n                                \n                                11.1.8 through 11.1.10-h*\n                                Upgrade to 11.1.10-h35 or 11.1.16-h3 or later.\n                            \n                                \n                                11.1.7 through 11.1.7-h*\n                                Upgrade to 11.1.7-h11 or 11.1.16-h3 or later.\n                            \n                                \n                                11.1.5 through 11.1.6-h*\n                                Upgrade to 11.1.6-h39 or 11.1.16-h3 or later.\n                            \n                                \n                                11.1.0 through 11.1.4-h*\n                                Upgrade to 11.1.4-h37 or 11.1.16-h3 or later.\n                            \n                                PAN-OS 10.2\n\n                                10.2.17 through 10.2.18-h*\n                                Upgrade to 10.2.18-h12 or later.\n                            \n                                \n                                10.2.14 through 10.2.16-h*\n                                Upgrade to 10.2.16-h11 or 10.2.18-h12 or later.\n                            \n                                \n                                10.2.11 through 10.2.13-h*\n                                Upgrade to 10.2.13-h26 or 10.2.18-h12 or later.\n                            \n                                \n                                10.2.8 through 10.2.10-h*\n                                Upgrade to 10.2.10-h41 or 10.2.18-h12 or later.\n                            \n                                \n                                10.2.0 through 10.2.7-h*\n                                Upgrade to 10.2.7-h38 or 10.2.18-h12 or later."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-14T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "PAN-OS: Authenticated Admin Command Injection Vulnerability",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNo known workarounds exist for this issue.\u003c/p\u003e\u003cp\u003eCustomers with a Threat Prevention subscription are provided with limited coverage against this vulnerability by enabling Threat ID 510044\u0026nbsp;and 510049 (from Applications and Threats content version 9159-10287 and later). Please note that this Threat ID requires SSL Decryption.\u003c/p\u003e"
            }
          ],
          "value": "No known workarounds exist for this issue.\n\n\n\nCustomers with a Threat Prevention subscription are provided with limited coverage against this vulnerability by enabling Threat ID 510044\u00a0and 510049 (from Applications and Threats content version 9159-10287 and later). Please note that this Threat ID requires SSL Decryption."
        }
      ],
      "x_affectedList": [
        "PAN-OS 12.2.3",
        "PAN-OS 12.2.2",
        "PAN-OS 12.1.10",
        "PAN-OS 12.1.9",
        "PAN-OS 12.1.8",
        "PAN-OS 12.1.7-h6",
        "PAN-OS 12.1.7-h5",
        "PAN-OS 12.1.7-h3",
        "PAN-OS 12.1.7-h2",
        "PAN-OS 12.1.7-h1",
        "PAN-OS 12.1.7",
        "PAN-OS 12.1.6",
        "PAN-OS 12.1.5",
        "PAN-OS 12.1.4-h11",
        "PAN-OS 12.1.4-h10",
        "PAN-OS 12.1.4-h9",
        "PAN-OS 12.1.4-h8",
        "PAN-OS 12.1.4-h7",
        "PAN-OS 12.1.4-h6",
        "PAN-OS 12.1.4-h5",
        "PAN-OS 12.1.4-h3",
        "PAN-OS 12.1.4-h2",
        "PAN-OS 12.1.4",
        "PAN-OS 12.1.3-h3",
        "PAN-OS 12.1.3-h1",
        "PAN-OS 12.1.3",
        "PAN-OS 12.1.2",
        "PAN-OS 11.2.15",
        "PAN-OS 11.2.13-h2",
        "PAN-OS 11.2.13-h1",
        "PAN-OS 11.2.13",
        "PAN-OS 11.2.12",
        "PAN-OS 11.2.11",
        "PAN-OS 11.2.10-h14",
        "PAN-OS 11.2.10-h13",
        "PAN-OS 11.2.10-h12",
        "PAN-OS 11.2.10-h10",
        "PAN-OS 11.2.10-h9",
        "PAN-OS 11.2.10-h8",
        "PAN-OS 11.2.10-h7",
        "PAN-OS 11.2.10-h6",
        "PAN-OS 11.2.10-h5",
        "PAN-OS 11.2.10-h4",
        "PAN-OS 11.2.10-h3",
        "PAN-OS 11.2.10-h2",
        "PAN-OS 11.2.10-h1",
        "PAN-OS 11.2.10",
        "PAN-OS 11.2.9",
        "PAN-OS 11.2.8",
        "PAN-OS 11.2.7-h20",
        "PAN-OS 11.2.7-h19",
        "PAN-OS 11.2.7-h18",
        "PAN-OS 11.2.7-h17",
        "PAN-OS 11.2.7-h16",
        "PAN-OS 11.2.7-h15",
        "PAN-OS 11.2.7-h14",
        "PAN-OS 11.2.7-h13",
        "PAN-OS 11.2.7-h12",
        "PAN-OS 11.2.7-h11",
        "PAN-OS 11.2.7-h10",
        "PAN-OS 11.2.7-h8",
        "PAN-OS 11.2.7-h7",
        "PAN-OS 11.2.7-h4",
        "PAN-OS 11.2.7-h3",
        "PAN-OS 11.2.7-h2",
        "PAN-OS 11.2.7-h1",
        "PAN-OS 11.2.7",
        "PAN-OS 11.2.6",
        "PAN-OS 11.2.5",
        "PAN-OS 11.2.4-h21",
        "PAN-OS 11.2.4-h20",
        "PAN-OS 11.2.4-h18",
        "PAN-OS 11.2.4-h17",
        "PAN-OS 11.2.4-h15",
        "PAN-OS 11.2.4-h14",
        "PAN-OS 11.2.4-h12",
        "PAN-OS 11.2.4-h11",
        "PAN-OS 11.2.4-h10",
        "PAN-OS 11.2.4-h9",
        "PAN-OS 11.2.4-h8",
        "PAN-OS 11.2.4-h7",
        "PAN-OS 11.2.4-h6",
        "PAN-OS 11.2.4-h5",
        "PAN-OS 11.2.4-h4",
        "PAN-OS 11.2.4-h3",
        "PAN-OS 11.2.4-h2",
        "PAN-OS 11.2.4-h1",
        "PAN-OS 11.2.4",
        "PAN-OS 11.2.3-h5",
        "PAN-OS 11.2.3-h4",
        "PAN-OS 11.2.3-h3",
        "PAN-OS 11.2.3-h2",
        "PAN-OS 11.2.3-h1",
        "PAN-OS 11.2.3",
        "PAN-OS 11.2.2-h2",
        "PAN-OS 11.2.2-h1",
        "PAN-OS 11.2.1-h1",
        "PAN-OS 11.2.1",
        "PAN-OS 11.2.0-h1",
        "PAN-OS 11.2.0",
        "PAN-OS 11.1.16-h2",
        "PAN-OS 11.1.16-h1",
        "PAN-OS 11.1.16",
        "PAN-OS 11.1.15",
        "PAN-OS 11.1.14",
        "PAN-OS 11.1.13-h12",
        "PAN-OS 11.1.13-h11",
        "PAN-OS 11.1.13-h10",
        "PAN-OS 11.1.13-h9",
        "PAN-OS 11.1.13-h8",
        "PAN-OS 11.1.13-h7",
        "PAN-OS 11.1.13-h6",
        "PAN-OS 11.1.13-h5",
        "PAN-OS 11.1.13-h3",
        "PAN-OS 11.1.13-h2",
        "PAN-OS 11.1.13-h1",
        "PAN-OS 11.1.13",
        "PAN-OS 11.1.12",
        "PAN-OS 11.1.11",
        "PAN-OS 11.1.10-h33",
        "PAN-OS 11.1.10-h32",
        "PAN-OS 11.1.10-h30",
        "PAN-OS 11.1.10-h28",
        "PAN-OS 11.1.10-h27",
        "PAN-OS 11.1.10-h26",
        "PAN-OS 11.1.10-h25",
        "PAN-OS 11.1.10-h21",
        "PAN-OS 11.1.10-h12",
        "PAN-OS 11.1.10-h10",
        "PAN-OS 11.1.10-h9",
        "PAN-OS 11.1.10-h7",
        "PAN-OS 11.1.10-h5",
        "PAN-OS 11.1.10-h4",
        "PAN-OS 11.1.10-h1",
        "PAN-OS 11.1.10",
        "PAN-OS 11.1.9",
        "PAN-OS 11.1.8",
        "PAN-OS 11.1.6-h38",
        "PAN-OS 11.1.6-h36",
        "PAN-OS 11.1.6-h35",
        "PAN-OS 11.1.6-h34",
        "PAN-OS 11.1.6-h33",
        "PAN-OS 11.1.6-h32",
        "PAN-OS 11.1.6-h29",
        "PAN-OS 11.1.6-h25",
        "PAN-OS 11.1.6-h23",
        "PAN-OS 11.1.6-h22",
        "PAN-OS 11.1.6-h21",
        "PAN-OS 11.1.6-h20",
        "PAN-OS 11.1.6-h19",
        "PAN-OS 11.1.6-h18",
        "PAN-OS 11.1.6-h17",
        "PAN-OS 11.1.6-h14",
        "PAN-OS 11.1.6-h10",
        "PAN-OS 11.1.6-h7",
        "PAN-OS 11.1.6-h6",
        "PAN-OS 11.1.6-h4",
        "PAN-OS 11.1.6-h3",
        "PAN-OS 11.1.6-h2",
        "PAN-OS 11.1.6-h1",
        "PAN-OS 11.1.6",
        "PAN-OS 11.1.5-h1",
        "PAN-OS 11.1.5",
        "PAN-OS 11.1.4-h36",
        "PAN-OS 11.1.4-h35",
        "PAN-OS 11.1.4-h34",
        "PAN-OS 11.1.4-h33",
        "PAN-OS 11.1.4-h32",
        "PAN-OS 11.1.4-h27",
        "PAN-OS 11.1.4-h25",
        "PAN-OS 11.1.4-h18",
        "PAN-OS 11.1.4-h17",
        "PAN-OS 11.1.4-h15",
        "PAN-OS 11.1.4-h13",
        "PAN-OS 11.1.4-h12",
        "PAN-OS 11.1.4-h11",
        "PAN-OS 11.1.4-h10",
        "PAN-OS 11.1.4-h9",
        "PAN-OS 11.1.4-h8",
        "PAN-OS 11.1.4-h7",
        "PAN-OS 11.1.4-h6",
        "PAN-OS 11.1.4-h5",
        "PAN-OS 11.1.4-h4",
        "PAN-OS 11.1.4-h3",
        "PAN-OS 11.1.4-h2",
        "PAN-OS 11.1.4-h1",
        "PAN-OS 11.1.4",
        "PAN-OS 11.1.3-h13",
        "PAN-OS 11.1.3-h12",
        "PAN-OS 11.1.3-h11",
        "PAN-OS 11.1.3-h10",
        "PAN-OS 11.1.3-h9",
        "PAN-OS 11.1.3-h8",
        "PAN-OS 11.1.3-h7",
        "PAN-OS 11.1.3-h6",
        "PAN-OS 11.1.3-h5",
        "PAN-OS 11.1.3-h4",
        "PAN-OS 11.1.3-h3",
        "PAN-OS 11.1.3-h2",
        "PAN-OS 11.1.3-h1",
        "PAN-OS 11.1.3",
        "PAN-OS 11.1.2-h18",
        "PAN-OS 11.1.2-h17",
        "PAN-OS 11.1.2-h16",
        "PAN-OS 11.1.2-h15",
        "PAN-OS 11.1.2-h14",
        "PAN-OS 11.1.2-h13",
        "PAN-OS 11.1.2-h12",
        "PAN-OS 11.1.2-h11",
        "PAN-OS 11.1.2-h10",
        "PAN-OS 11.1.2-h9",
        "PAN-OS 11.1.2-h8",
        "PAN-OS 11.1.2-h7",
        "PAN-OS 11.1.2-h6",
        "PAN-OS 11.1.2-h5",
        "PAN-OS 11.1.2-h4",
        "PAN-OS 11.1.2-h3",
        "PAN-OS 11.1.2-h2",
        "PAN-OS 11.1.2-h1",
        "PAN-OS 11.1.2",
        "PAN-OS 11.1.1-h2",
        "PAN-OS 11.1.1-h1",
        "PAN-OS 11.1.1",
        "PAN-OS 11.1.0-h4",
        "PAN-OS 11.1.0-h3",
        "PAN-OS 11.1.0-h2",
        "PAN-OS 11.1.0-h1",
        "PAN-OS 11.1.0",
        "PAN-OS 10.2.18-h10",
        "PAN-OS 10.2.18-h9",
        "PAN-OS 10.2.18-h8",
        "PAN-OS 10.2.18-h7",
        "PAN-OS 10.2.18-h6",
        "PAN-OS 10.2.18-h5",
        "PAN-OS 10.2.18-h1",
        "PAN-OS 10.2.18",
        "PAN-OS 10.2.17",
        "PAN-OS 10.2.16-h10",
        "PAN-OS 10.2.16-h9",
        "PAN-OS 10.2.16-h8",
        "PAN-OS 10.2.16-h7",
        "PAN-OS 10.2.16-h6",
        "PAN-OS 10.2.16-h4",
        "PAN-OS 10.2.16-h1",
        "PAN-OS 10.2.16",
        "PAN-OS 10.2.15",
        "PAN-OS 10.2.14-h1",
        "PAN-OS 10.2.14",
        "PAN-OS 10.2.13-h24",
        "PAN-OS 10.2.13-h23",
        "PAN-OS 10.2.13-h22",
        "PAN-OS 10.2.13-h21",
        "PAN-OS 10.2.13-h18",
        "PAN-OS 10.2.13-h16",
        "PAN-OS 10.2.13-h15",
        "PAN-OS 10.2.13-h10",
        "PAN-OS 10.2.13-h7",
        "PAN-OS 10.2.13-h5",
        "PAN-OS 10.2.13-h4",
        "PAN-OS 10.2.13-h3",
        "PAN-OS 10.2.13-h2",
        "PAN-OS 10.2.13-h1",
        "PAN-OS 10.2.13",
        "PAN-OS 10.2.12-h6",
        "PAN-OS 10.2.12-h5",
        "PAN-OS 10.2.12-h4",
        "PAN-OS 10.2.12-h3",
        "PAN-OS 10.2.12-h2",
        "PAN-OS 10.2.12-h1",
        "PAN-OS 10.2.12",
        "PAN-OS 10.2.11-h13",
        "PAN-OS 10.2.11-h12",
        "PAN-OS 10.2.11-h11",
        "PAN-OS 10.2.11-h10",
        "PAN-OS 10.2.11-h9",
        "PAN-OS 10.2.11-h8",
        "PAN-OS 10.2.11-h7",
        "PAN-OS 10.2.11-h6",
        "PAN-OS 10.2.11-h5",
        "PAN-OS 10.2.11-h4",
        "PAN-OS 10.2.11-h3",
        "PAN-OS 10.2.11-h2",
        "PAN-OS 10.2.11-h1",
        "PAN-OS 10.2.11",
        "PAN-OS 10.2.10-h40",
        "PAN-OS 10.2.10-h39",
        "PAN-OS 10.2.10-h37",
        "PAN-OS 10.2.10-h36",
        "PAN-OS 10.2.10-h31",
        "PAN-OS 10.2.10-h30",
        "PAN-OS 10.2.10-h27",
        "PAN-OS 10.2.10-h26",
        "PAN-OS 10.2.10-h23",
        "PAN-OS 10.2.10-h21",
        "PAN-OS 10.2.10-h18",
        "PAN-OS 10.2.10-h17",
        "PAN-OS 10.2.10-h14",
        "PAN-OS 10.2.10-h13",
        "PAN-OS 10.2.10-h12",
        "PAN-OS 10.2.10-h11",
        "PAN-OS 10.2.10-h10",
        "PAN-OS 10.2.10-h9",
        "PAN-OS 10.2.10-h8",
        "PAN-OS 10.2.10-h7",
        "PAN-OS 10.2.10-h6",
        "PAN-OS 10.2.10-h5",
        "PAN-OS 10.2.10-h4",
        "PAN-OS 10.2.10-h3",
        "PAN-OS 10.2.10-h2",
        "PAN-OS 10.2.10-h1",
        "PAN-OS 10.2.10",
        "PAN-OS 10.2.9-h21",
        "PAN-OS 10.2.9-h20",
        "PAN-OS 10.2.9-h19",
        "PAN-OS 10.2.9-h18",
        "PAN-OS 10.2.9-h17",
        "PAN-OS 10.2.9-h16",
        "PAN-OS 10.2.9-h15",
        "PAN-OS 10.2.9-h14",
        "PAN-OS 10.2.9-h13",
        "PAN-OS 10.2.9-h12",
        "PAN-OS 10.2.9-h11",
        "PAN-OS 10.2.9-h10",
        "PAN-OS 10.2.9-h9",
        "PAN-OS 10.2.9-h8",
        "PAN-OS 10.2.9-h7",
        "PAN-OS 10.2.9-h6",
        "PAN-OS 10.2.9-h5",
        "PAN-OS 10.2.9-h4",
        "PAN-OS 10.2.9-h3",
        "PAN-OS 10.2.9-h2",
        "PAN-OS 10.2.9-h1",
        "PAN-OS 10.2.9",
        "PAN-OS 10.2.8-h21",
        "PAN-OS 10.2.8-h20",
        "PAN-OS 10.2.8-h19",
        "PAN-OS 10.2.8-h18",
        "PAN-OS 10.2.8-h17",
        "PAN-OS 10.2.8-h16",
        "PAN-OS 10.2.8-h15",
        "PAN-OS 10.2.8-h14",
        "PAN-OS 10.2.8-h13",
        "PAN-OS 10.2.8-h12",
        "PAN-OS 10.2.8-h11",
        "PAN-OS 10.2.8-h10",
        "PAN-OS 10.2.8-h9",
        "PAN-OS 10.2.8-h8",
        "PAN-OS 10.2.8-h7",
        "PAN-OS 10.2.8-h6",
        "PAN-OS 10.2.8-h5",
        "PAN-OS 10.2.8-h4",
        "PAN-OS 10.2.8-h3",
        "PAN-OS 10.2.8-h2",
        "PAN-OS 10.2.8-h1",
        "PAN-OS 10.2.8",
        "PAN-OS 10.2.7-h37",
        "PAN-OS 10.2.7-h36",
        "PAN-OS 10.2.7-h35",
        "PAN-OS 10.2.7-h34",
        "PAN-OS 10.2.7-h32",
        "PAN-OS 10.2.7-h24",
        "PAN-OS 10.2.7-h23",
        "PAN-OS 10.2.7-h22",
        "PAN-OS 10.2.7-h21",
        "PAN-OS 10.2.7-h20",
        "PAN-OS 10.2.7-h19",
        "PAN-OS 10.2.7-h18",
        "PAN-OS 10.2.7-h17",
        "PAN-OS 10.2.7-h16",
        "PAN-OS 10.2.7-h15",
        "PAN-OS 10.2.7-h14",
        "PAN-OS 10.2.7-h13",
        "PAN-OS 10.2.7-h12",
        "PAN-OS 10.2.7-h11",
        "PAN-OS 10.2.7-h10",
        "PAN-OS 10.2.7-h9",
        "PAN-OS 10.2.7-h8",
        "PAN-OS 10.2.7-h7",
        "PAN-OS 10.2.7-h6",
        "PAN-OS 10.2.7-h5",
        "PAN-OS 10.2.7-h4",
        "PAN-OS 10.2.7-h3",
        "PAN-OS 10.2.7-h2",
        "PAN-OS 10.2.7-h1",
        "PAN-OS 10.2.7",
        "PAN-OS 10.2.6-h6",
        "PAN-OS 10.2.6-h5",
        "PAN-OS 10.2.6-h4",
        "PAN-OS 10.2.6-h3",
        "PAN-OS 10.2.6-h2",
        "PAN-OS 10.2.6-h1",
        "PAN-OS 10.2.6",
        "PAN-OS 10.2.5-h9",
        "PAN-OS 10.2.5-h8",
        "PAN-OS 10.2.5-h7",
        "PAN-OS 10.2.5-h6",
        "PAN-OS 10.2.5-h5",
        "PAN-OS 10.2.5-h4",
        "PAN-OS 10.2.5-h3",
        "PAN-OS 10.2.5-h2",
        "PAN-OS 10.2.5-h1",
        "PAN-OS 10.2.5",
        "PAN-OS 10.2.4-h32",
        "PAN-OS 10.2.4-h31",
        "PAN-OS 10.2.4-h30",
        "PAN-OS 10.2.4-h29",
        "PAN-OS 10.2.4-h28",
        "PAN-OS 10.2.4-h27",
        "PAN-OS 10.2.4-h26",
        "PAN-OS 10.2.4-h25",
        "PAN-OS 10.2.4-h24",
        "PAN-OS 10.2.4-h23",
        "PAN-OS 10.2.4-h22",
        "PAN-OS 10.2.4-h21",
        "PAN-OS 10.2.4-h20",
        "PAN-OS 10.2.4-h19",
        "PAN-OS 10.2.4-h18",
        "PAN-OS 10.2.4-h17",
        "PAN-OS 10.2.4-h16",
        "PAN-OS 10.2.4-h15",
        "PAN-OS 10.2.4-h14",
        "PAN-OS 10.2.4-h13",
        "PAN-OS 10.2.4-h12",
        "PAN-OS 10.2.4-h11",
        "PAN-OS 10.2.4-h10",
        "PAN-OS 10.2.4-h9",
        "PAN-OS 10.2.4-h8",
        "PAN-OS 10.2.4-h7",
        "PAN-OS 10.2.4-h6",
        "PAN-OS 10.2.4-h5",
        "PAN-OS 10.2.4-h4",
        "PAN-OS 10.2.4-h3",
        "PAN-OS 10.2.4-h2",
        "PAN-OS 10.2.4-h1",
        "PAN-OS 10.2.4",
        "PAN-OS 10.2.3-h14",
        "PAN-OS 10.2.3-h13",
        "PAN-OS 10.2.3-h12",
        "PAN-OS 10.2.3-h11",
        "PAN-OS 10.2.3-h10",
        "PAN-OS 10.2.3-h9",
        "PAN-OS 10.2.3-h8",
        "PAN-OS 10.2.3-h7",
        "PAN-OS 10.2.3-h6",
        "PAN-OS 10.2.3-h5",
        "PAN-OS 10.2.3-h4",
        "PAN-OS 10.2.3-h3",
        "PAN-OS 10.2.3-h2",
        "PAN-OS 10.2.3-h1",
        "PAN-OS 10.2.3",
        "PAN-OS 10.2.2-h6",
        "PAN-OS 10.2.2-h5",
        "PAN-OS 10.2.2-h4",
        "PAN-OS 10.2.2-h3",
        "PAN-OS 10.2.2-h2",
        "PAN-OS 10.2.2-h1",
        "PAN-OS 10.2.2",
        "PAN-OS 10.2.1-h3",
        "PAN-OS 10.2.1-h2",
        "PAN-OS 10.2.1-h1",
        "PAN-OS 10.2.1",
        "PAN-OS 10.2.0-h4",
        "PAN-OS 10.2.0-h3",
        "PAN-OS 10.2.0-h2",
        "PAN-OS 10.2.0-h1",
        "PAN-OS 10.2.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0320",
    "datePublished": "2026-10-14T20:09:49.697Z",
    "dateReserved": "2025-11-03T20:45:18.580Z",
    "dateUpdated": "2026-10-16T03:56:59.391Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-0321 (GCVE-0-2026-0321)

    Vulnerability from cvelistv5 – Published: 2026-10-14 19:58 – Updated: 2026-10-15 19:31
    VLAI
    Title
    PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services
    Summary
    Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Repeated attempts to trigger this condition result in the firewall entering maintenance mode. Cloud NGFW and Panorama are not affected by this vulnerability.
    Severity
    6.6 (Medium)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-15 19:31 UTC
    CWE
    • CWE-754 - Improper Check for Unusual or Exceptional Conditions
    Assigner
    palo_alto CNA under the mitre root
    CNA scorecard A 95/100 over 96 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Palo Alto Networks Cloud NGFW Unaffected: All (custom)
    		Create a notification for this product.
    Palo Alto Networks PAN-OS Affected: 12.2.0 , < 12.2.4 (custom)
    Affected: 12.1.0 , < 12.1.10-h2 (custom)
    Affected: 11.2.0 , < 11.2.16 (custom)
    Affected: 11.1.0 , < 11.1.16-h3 (custom)
    Affected: 10.2.0 , < 10.2.18-h12 (custom)
        cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h33:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h32:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h30:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h28:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h27:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h26:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h25:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h38:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h36:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h35:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h34:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h33:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h32:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h36:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h35:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h34:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h33:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h25:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h24:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h23:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h22:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h40:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h39:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h37:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h36:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h37:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h36:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h35:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h34:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h32:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h24:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h23:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h22:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h20:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h19:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h16:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*
    		Create a notification for this product.
    Palo Alto Networks Prisma Access Affected: 12.1.0 , < 12.1.7-h8 (custom)
    Affected: 11.2.0 , < 11.2.7-h21 (custom)
    Affected: 10.2.0 , < 10.2.10-h41 (custom)
        cpe:2.3:a:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:*
        cpe:2.3:a:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:*
        cpe:2.3:a:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Date Public
    2026-10-14 16:00
    Credits
    Ben Nott (internal reporter)
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0321",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T19:31:07.239763Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T19:31:16.341Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Cloud NGFW",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h33:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h32:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h30:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h28:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h27:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h26:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h25:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h38:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h35:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h34:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h33:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h32:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h35:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h34:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h33:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h25:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h24:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h22:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h40:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h39:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h37:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h37:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h35:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h34:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h32:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h24:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h22:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h20:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h19:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h16:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "PAN-OS",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.2.4",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.2.4",
              "status": "affected",
              "version": "12.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "12.1.10-h2",
                  "status": "unaffected"
                },
                {
                  "at": "12.1.7-h8",
                  "status": "unaffected"
                },
                {
                  "at": "12.1.4-h12",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.1.10-h2",
              "status": "affected",
              "version": "12.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.2.16",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.13-h3",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.10-h15",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.7-h21",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.4-h22",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.2.16",
              "status": "affected",
              "version": "11.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.1.16-h3",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.13-h15",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.10-h35",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.7-h11",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.6-h39",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.4-h37",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.1.16-h3",
              "status": "affected",
              "version": "11.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "10.2.18-h12",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.16-h11",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.13-h26",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.10-h41",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.7-h38",
                  "status": "unaffected"
                }
              ],
              "lessThan": "10.2.18-h12",
              "status": "affected",
              "version": "10.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Prisma Access",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.1.7-h8",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.1.7-h8",
              "status": "affected",
              "version": "12.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.2.7-h21",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.2.7-h21",
              "status": "affected",
              "version": "11.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "10.2.10-h41",
                  "status": "unaffected"
                }
              ],
              "lessThan": "10.2.10-h41",
              "status": "affected",
              "version": "10.2.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:cloud_ngfw:all:*:*:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.2.4",
                  "versionStartIncluding": "12.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.1.10-h2",
                  "versionStartIncluding": "12.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.2.16",
                  "versionStartIncluding": "11.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.1.16-h3",
                  "versionStartIncluding": "11.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.2.18-h12",
                  "versionStartIncluding": "10.2.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.1.7-h8",
                  "versionStartIncluding": "12.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.2.7-h21",
                  "versionStartIncluding": "11.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.2.10-h41",
                  "versionStartIncluding": "10.2.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Ben Nott (internal reporter)"
        }
      ],
      "datePublic": "2026-10-14T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003c/p\u003e\u003cp\u003e\u003cspan\u003eDenial of service vulnerabilities in Palo Alto Networks PAN-OS\u00ae software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Repeated attempts to trigger this condition result in the firewall entering maintenance mode.\u003c/span\u003e\u003c/p\u003e\u003cp\u003e\u003cspan\u003e\u003cspan\u003eCloud NGFW and Panorama are not affected by this vulnerability.\u003c/span\u003e\u003c/span\u003e\u003c/p\u003e \u003cp\u003e\u003c/p\u003e"
            }
          ],
          "value": "Denial of service vulnerabilities in Palo Alto Networks PAN-OS\u00ae software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Repeated attempts to trigger this condition result in the firewall entering maintenance mode.\n\n\n\nCloud NGFW and Panorama are not affected by this vulnerability."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-153",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-153 Input Data Manipulation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 6.6,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-754",
              "description": "CWE-754 Improper Check for Unusual or Exceptional Conditions",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T19:58:55.823Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0321"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 12.2\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.2.0 through 12.2.3 \u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.2.4 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 12.1\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.1.8 through 12.1.10-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.1.10-h2 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.1.5 through 12.1.7-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.1.7-h8 or 12.1.10-h2 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.1.2 through 12.1.4-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.1.4-h12 or 12.1.10-h2 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 11.2\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.14 through\u0026nbsp;11.2.15-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.11 through 11.2.13-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.13-h3 or 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.8 through 11.2.10-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.10-h15 or 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.5 through 11.2.7-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.7-h21 or 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.0 through 11.2.4-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.4-h22 or 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 11.1\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.14 through 11.1.16-h* \u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.11 through 11.1.13-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.13-h15 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.8 through 11.1.10-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.10-h35 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.7 through 11.1.7-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.7-h11 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.5 through 11.1.6-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.6-h39 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.0 through 11.1.4-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.4-h37 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 10.2\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.17 through 10.2.18-h* \u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.14 through 10.2.16-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.16-h11 or 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.11 through 10.2.13-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.13-h26 or 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.8 through 10.2.10-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.10-h41 or 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.0 through 10.2.7-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.7-h38 or 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003ePrisma Access needs to be upgraded in accordance with product status table.\u0026nbsp;"
            }
          ],
          "value": "Version\nMinor Version\nSuggested Solution\n\n                                PAN-OS 12.2\n\n                                12.2.0 through 12.2.3 \n                                Upgrade to 12.2.4 or later.\n                            \n                                PAN-OS 12.1\n\n                                12.1.8 through 12.1.10-h*\n                                Upgrade to 12.1.10-h2 or later.\n                            \n                                \n                                12.1.5 through 12.1.7-h*\n                                Upgrade to 12.1.7-h8 or 12.1.10-h2 or later.\n                            \n                                \n                                12.1.2 through 12.1.4-h*\n                                Upgrade to 12.1.4-h12 or 12.1.10-h2 or later.\n                            \n                                PAN-OS 11.2\n\n                                11.2.14 through\u00a011.2.15-h*\n                                Upgrade to 11.2.16 or later.\n                            \n                                \n                                11.2.11 through 11.2.13-h*\n                                Upgrade to 11.2.13-h3 or 11.2.16 or later.\n                            \n                                \n                                11.2.8 through 11.2.10-h*\n                                Upgrade to 11.2.10-h15 or 11.2.16 or later.\n                            \n                                \n                                11.2.5 through 11.2.7-h*\n                                Upgrade to 11.2.7-h21 or 11.2.16 or later.\n                            \n                                \n                                11.2.0 through 11.2.4-h*\n                                Upgrade to 11.2.4-h22 or 11.2.16 or later.\n                            \n                                PAN-OS 11.1\n\n                                11.1.14 through 11.1.16-h* \n                                Upgrade to 11.1.16-h3 or later.\n                            \n                                \n                                11.1.11 through 11.1.13-h*\n                                Upgrade to 11.1.13-h15 or 11.1.16-h3 or later.\n                            \n                                \n                                11.1.8 through 11.1.10-h*\n                                Upgrade to 11.1.10-h35 or 11.1.16-h3 or later.\n                            \n                                \n                                11.1.7 through 11.1.7-h*\n                                Upgrade to 11.1.7-h11 or 11.1.16-h3 or later.\n                            \n                                \n                                11.1.5 through 11.1.6-h*\n                                Upgrade to 11.1.6-h39 or 11.1.16-h3 or later.\n                            \n                                \n                                11.1.0 through 11.1.4-h*\n                                Upgrade to 11.1.4-h37 or 11.1.16-h3 or later.\n                            \n                                PAN-OS 10.2\n\n                                10.2.17 through 10.2.18-h* \n                                Upgrade to 10.2.18-h12 or later.\n                            \n                                \n                                10.2.14 through 10.2.16-h*\n                                Upgrade to 10.2.16-h11 or 10.2.18-h12 or later.\n                            \n                                \n                                10.2.11 through 10.2.13-h*\n                                Upgrade to 10.2.13-h26 or 10.2.18-h12 or later.\n                            \n                                \n                                10.2.8 through 10.2.10-h*\n                                Upgrade to 10.2.10-h41 or 10.2.18-h12 or later.\n                            \n                                \n                                10.2.0 through 10.2.7-h*\n                                Upgrade to 10.2.7-h38 or 10.2.18-h12 or later.\n                            Prisma Access needs to be upgraded in accordance with product status table."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-14T16:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No known workarounds exist for this issue.\u003cbr\u003e\u003cbr\u003eCustomers with a Threat Prevention subscription are provided with limited coverage against this vulnerability by enabling Threat ID 510038 (from Applications and Threats content version \u003cspan\u003e9158-10284\u003c/span\u003e and later). Please note that this Threat ID requires SSL Decryption."
            }
          ],
          "value": "No known workarounds exist for this issue.\n\nCustomers with a Threat Prevention subscription are provided with limited coverage against this vulnerability by enabling Threat ID 510038 (from Applications and Threats content version 9158-10284 and later). Please note that this Threat ID requires SSL Decryption."
        }
      ],
      "x_affectedList": [
        "PAN-OS 12.2.3",
        "PAN-OS 12.2.2",
        "PAN-OS 12.1.10",
        "PAN-OS 12.1.9",
        "PAN-OS 12.1.8",
        "PAN-OS 12.1.7-h6",
        "PAN-OS 12.1.7-h5",
        "PAN-OS 12.1.7-h3",
        "PAN-OS 12.1.7-h2",
        "PAN-OS 12.1.7-h1",
        "PAN-OS 12.1.7",
        "PAN-OS 12.1.6",
        "PAN-OS 12.1.5",
        "PAN-OS 12.1.4-h11",
        "PAN-OS 12.1.4-h10",
        "PAN-OS 12.1.4-h9",
        "PAN-OS 12.1.4-h8",
        "PAN-OS 12.1.4-h7",
        "PAN-OS 12.1.4-h6",
        "PAN-OS 12.1.4-h5",
        "PAN-OS 12.1.4-h3",
        "PAN-OS 12.1.4-h2",
        "PAN-OS 12.1.4",
        "PAN-OS 12.1.3-h3",
        "PAN-OS 12.1.3-h1",
        "PAN-OS 12.1.3",
        "PAN-OS 12.1.2",
        "PAN-OS 11.2.15",
        "PAN-OS 11.2.13-h2",
        "PAN-OS 11.2.13-h1",
        "PAN-OS 11.2.13",
        "PAN-OS 11.2.12",
        "PAN-OS 11.2.11",
        "PAN-OS 11.2.10-h14",
        "PAN-OS 11.2.10-h13",
        "PAN-OS 11.2.10-h12",
        "PAN-OS 11.2.10-h10",
        "PAN-OS 11.2.10-h9",
        "PAN-OS 11.2.10-h8",
        "PAN-OS 11.2.10-h7",
        "PAN-OS 11.2.10-h6",
        "PAN-OS 11.2.10-h5",
        "PAN-OS 11.2.10-h4",
        "PAN-OS 11.2.10-h3",
        "PAN-OS 11.2.10-h2",
        "PAN-OS 11.2.10-h1",
        "PAN-OS 11.2.10",
        "PAN-OS 11.2.9",
        "PAN-OS 11.2.8",
        "PAN-OS 11.2.7-h20",
        "PAN-OS 11.2.7-h19",
        "PAN-OS 11.2.7-h18",
        "PAN-OS 11.2.7-h17",
        "PAN-OS 11.2.7-h16",
        "PAN-OS 11.2.7-h15",
        "PAN-OS 11.2.7-h14",
        "PAN-OS 11.2.7-h13",
        "PAN-OS 11.2.7-h12",
        "PAN-OS 11.2.7-h11",
        "PAN-OS 11.2.7-h10",
        "PAN-OS 11.2.7-h8",
        "PAN-OS 11.2.7-h7",
        "PAN-OS 11.2.7-h4",
        "PAN-OS 11.2.7-h3",
        "PAN-OS 11.2.7-h2",
        "PAN-OS 11.2.7-h1",
        "PAN-OS 11.2.7",
        "PAN-OS 11.2.6",
        "PAN-OS 11.2.5",
        "PAN-OS 11.2.4-h21",
        "PAN-OS 11.2.4-h20",
        "PAN-OS 11.2.4-h18",
        "PAN-OS 11.2.4-h17",
        "PAN-OS 11.2.4-h15",
        "PAN-OS 11.2.4-h14",
        "PAN-OS 11.2.4-h12",
        "PAN-OS 11.2.4-h11",
        "PAN-OS 11.2.4-h10",
        "PAN-OS 11.2.4-h9",
        "PAN-OS 11.2.4-h8",
        "PAN-OS 11.2.4-h7",
        "PAN-OS 11.2.4-h6",
        "PAN-OS 11.2.4-h5",
        "PAN-OS 11.2.4-h4",
        "PAN-OS 11.2.4-h3",
        "PAN-OS 11.2.4-h2",
        "PAN-OS 11.2.4-h1",
        "PAN-OS 11.2.4",
        "PAN-OS 11.2.3-h5",
        "PAN-OS 11.2.3-h4",
        "PAN-OS 11.2.3-h3",
        "PAN-OS 11.2.3-h2",
        "PAN-OS 11.2.3-h1",
        "PAN-OS 11.2.3",
        "PAN-OS 11.2.2-h2",
        "PAN-OS 11.2.2-h1",
        "PAN-OS 11.2.1-h1",
        "PAN-OS 11.2.1",
        "PAN-OS 11.2.0-h1",
        "PAN-OS 11.2.0",
        "PAN-OS 11.1.16-h2",
        "PAN-OS 11.1.16-h1",
        "PAN-OS 11.1.16",
        "PAN-OS 11.1.15",
        "PAN-OS 11.1.14",
        "PAN-OS 11.1.13-h12",
        "PAN-OS 11.1.13-h11",
        "PAN-OS 11.1.13-h10",
        "PAN-OS 11.1.13-h9",
        "PAN-OS 11.1.13-h8",
        "PAN-OS 11.1.13-h7",
        "PAN-OS 11.1.13-h6",
        "PAN-OS 11.1.13-h5",
        "PAN-OS 11.1.13-h3",
        "PAN-OS 11.1.13-h2",
        "PAN-OS 11.1.13-h1",
        "PAN-OS 11.1.13",
        "PAN-OS 11.1.12",
        "PAN-OS 11.1.11",
        "PAN-OS 11.1.10-h33",
        "PAN-OS 11.1.10-h32",
        "PAN-OS 11.1.10-h30",
        "PAN-OS 11.1.10-h28",
        "PAN-OS 11.1.10-h27",
        "PAN-OS 11.1.10-h26",
        "PAN-OS 11.1.10-h25",
        "PAN-OS 11.1.10-h21",
        "PAN-OS 11.1.10-h12",
        "PAN-OS 11.1.10-h10",
        "PAN-OS 11.1.10-h9",
        "PAN-OS 11.1.10-h7",
        "PAN-OS 11.1.10-h5",
        "PAN-OS 11.1.10-h4",
        "PAN-OS 11.1.10-h1",
        "PAN-OS 11.1.10",
        "PAN-OS 11.1.9",
        "PAN-OS 11.1.8",
        "PAN-OS 11.1.6-h38",
        "PAN-OS 11.1.6-h36",
        "PAN-OS 11.1.6-h35",
        "PAN-OS 11.1.6-h34",
        "PAN-OS 11.1.6-h33",
        "PAN-OS 11.1.6-h32",
        "PAN-OS 11.1.6-h29",
        "PAN-OS 11.1.6-h25",
        "PAN-OS 11.1.6-h23",
        "PAN-OS 11.1.6-h22",
        "PAN-OS 11.1.6-h21",
        "PAN-OS 11.1.6-h20",
        "PAN-OS 11.1.6-h19",
        "PAN-OS 11.1.6-h18",
        "PAN-OS 11.1.6-h17",
        "PAN-OS 11.1.6-h14",
        "PAN-OS 11.1.6-h10",
        "PAN-OS 11.1.6-h7",
        "PAN-OS 11.1.6-h6",
        "PAN-OS 11.1.6-h4",
        "PAN-OS 11.1.6-h3",
        "PAN-OS 11.1.6-h2",
        "PAN-OS 11.1.6-h1",
        "PAN-OS 11.1.6",
        "PAN-OS 11.1.5-h1",
        "PAN-OS 11.1.5",
        "PAN-OS 11.1.4-h36",
        "PAN-OS 11.1.4-h35",
        "PAN-OS 11.1.4-h34",
        "PAN-OS 11.1.4-h33",
        "PAN-OS 11.1.4-h32",
        "PAN-OS 11.1.4-h27",
        "PAN-OS 11.1.4-h25",
        "PAN-OS 11.1.4-h18",
        "PAN-OS 11.1.4-h17",
        "PAN-OS 11.1.4-h15",
        "PAN-OS 11.1.4-h13",
        "PAN-OS 11.1.4-h12",
        "PAN-OS 11.1.4-h11",
        "PAN-OS 11.1.4-h10",
        "PAN-OS 11.1.4-h9",
        "PAN-OS 11.1.4-h8",
        "PAN-OS 11.1.4-h7",
        "PAN-OS 11.1.4-h6",
        "PAN-OS 11.1.4-h5",
        "PAN-OS 11.1.4-h4",
        "PAN-OS 11.1.4-h3",
        "PAN-OS 11.1.4-h2",
        "PAN-OS 11.1.4-h1",
        "PAN-OS 11.1.4",
        "PAN-OS 11.1.3-h13",
        "PAN-OS 11.1.3-h12",
        "PAN-OS 11.1.3-h11",
        "PAN-OS 11.1.3-h10",
        "PAN-OS 11.1.3-h9",
        "PAN-OS 11.1.3-h8",
        "PAN-OS 11.1.3-h7",
        "PAN-OS 11.1.3-h6",
        "PAN-OS 11.1.3-h5",
        "PAN-OS 11.1.3-h4",
        "PAN-OS 11.1.3-h3",
        "PAN-OS 11.1.3-h2",
        "PAN-OS 11.1.3-h1",
        "PAN-OS 11.1.3",
        "PAN-OS 11.1.2-h18",
        "PAN-OS 11.1.2-h17",
        "PAN-OS 11.1.2-h16",
        "PAN-OS 11.1.2-h15",
        "PAN-OS 11.1.2-h14",
        "PAN-OS 11.1.2-h13",
        "PAN-OS 11.1.2-h12",
        "PAN-OS 11.1.2-h11",
        "PAN-OS 11.1.2-h10",
        "PAN-OS 11.1.2-h9",
        "PAN-OS 11.1.2-h8",
        "PAN-OS 11.1.2-h7",
        "PAN-OS 11.1.2-h6",
        "PAN-OS 11.1.2-h5",
        "PAN-OS 11.1.2-h4",
        "PAN-OS 11.1.2-h3",
        "PAN-OS 11.1.2-h2",
        "PAN-OS 11.1.2-h1",
        "PAN-OS 11.1.2",
        "PAN-OS 11.1.1-h2",
        "PAN-OS 11.1.1-h1",
        "PAN-OS 11.1.1",
        "PAN-OS 11.1.0-h4",
        "PAN-OS 11.1.0-h3",
        "PAN-OS 11.1.0-h2",
        "PAN-OS 11.1.0-h1",
        "PAN-OS 11.1.0",
        "PAN-OS 10.2.18-h10",
        "PAN-OS 10.2.18-h9",
        "PAN-OS 10.2.18-h8",
        "PAN-OS 10.2.18-h7",
        "PAN-OS 10.2.18-h6",
        "PAN-OS 10.2.18-h5",
        "PAN-OS 10.2.18-h1",
        "PAN-OS 10.2.18",
        "PAN-OS 10.2.17",
        "PAN-OS 10.2.16-h10",
        "PAN-OS 10.2.16-h9",
        "PAN-OS 10.2.16-h8",
        "PAN-OS 10.2.16-h7",
        "PAN-OS 10.2.16-h6",
        "PAN-OS 10.2.16-h4",
        "PAN-OS 10.2.16-h1",
        "PAN-OS 10.2.16",
        "PAN-OS 10.2.15",
        "PAN-OS 10.2.14-h1",
        "PAN-OS 10.2.14",
        "PAN-OS 10.2.13-h24",
        "PAN-OS 10.2.13-h23",
        "PAN-OS 10.2.13-h22",
        "PAN-OS 10.2.13-h21",
        "PAN-OS 10.2.13-h18",
        "PAN-OS 10.2.13-h16",
        "PAN-OS 10.2.13-h15",
        "PAN-OS 10.2.13-h10",
        "PAN-OS 10.2.13-h7",
        "PAN-OS 10.2.13-h5",
        "PAN-OS 10.2.13-h4",
        "PAN-OS 10.2.13-h3",
        "PAN-OS 10.2.13-h2",
        "PAN-OS 10.2.13-h1",
        "PAN-OS 10.2.13",
        "PAN-OS 10.2.12-h6",
        "PAN-OS 10.2.12-h5",
        "PAN-OS 10.2.12-h4",
        "PAN-OS 10.2.12-h3",
        "PAN-OS 10.2.12-h2",
        "PAN-OS 10.2.12-h1",
        "PAN-OS 10.2.12",
        "PAN-OS 10.2.11-h13",
        "PAN-OS 10.2.11-h12",
        "PAN-OS 10.2.11-h11",
        "PAN-OS 10.2.11-h10",
        "PAN-OS 10.2.11-h9",
        "PAN-OS 10.2.11-h8",
        "PAN-OS 10.2.11-h7",
        "PAN-OS 10.2.11-h6",
        "PAN-OS 10.2.11-h5",
        "PAN-OS 10.2.11-h4",
        "PAN-OS 10.2.11-h3",
        "PAN-OS 10.2.11-h2",
        "PAN-OS 10.2.11-h1",
        "PAN-OS 10.2.11",
        "PAN-OS 10.2.10-h40",
        "PAN-OS 10.2.10-h39",
        "PAN-OS 10.2.10-h37",
        "PAN-OS 10.2.10-h36",
        "PAN-OS 10.2.10-h31",
        "PAN-OS 10.2.10-h30",
        "PAN-OS 10.2.10-h27",
        "PAN-OS 10.2.10-h26",
        "PAN-OS 10.2.10-h23",
        "PAN-OS 10.2.10-h21",
        "PAN-OS 10.2.10-h18",
        "PAN-OS 10.2.10-h17",
        "PAN-OS 10.2.10-h14",
        "PAN-OS 10.2.10-h13",
        "PAN-OS 10.2.10-h12",
        "PAN-OS 10.2.10-h11",
        "PAN-OS 10.2.10-h10",
        "PAN-OS 10.2.10-h9",
        "PAN-OS 10.2.10-h8",
        "PAN-OS 10.2.10-h7",
        "PAN-OS 10.2.10-h6",
        "PAN-OS 10.2.10-h5",
        "PAN-OS 10.2.10-h4",
        "PAN-OS 10.2.10-h3",
        "PAN-OS 10.2.10-h2",
        "PAN-OS 10.2.10-h1",
        "PAN-OS 10.2.10",
        "PAN-OS 10.2.9-h21",
        "PAN-OS 10.2.9-h20",
        "PAN-OS 10.2.9-h19",
        "PAN-OS 10.2.9-h18",
        "PAN-OS 10.2.9-h17",
        "PAN-OS 10.2.9-h16",
        "PAN-OS 10.2.9-h15",
        "PAN-OS 10.2.9-h14",
        "PAN-OS 10.2.9-h13",
        "PAN-OS 10.2.9-h12",
        "PAN-OS 10.2.9-h11",
        "PAN-OS 10.2.9-h10",
        "PAN-OS 10.2.9-h9",
        "PAN-OS 10.2.9-h8",
        "PAN-OS 10.2.9-h7",
        "PAN-OS 10.2.9-h6",
        "PAN-OS 10.2.9-h5",
        "PAN-OS 10.2.9-h4",
        "PAN-OS 10.2.9-h3",
        "PAN-OS 10.2.9-h2",
        "PAN-OS 10.2.9-h1",
        "PAN-OS 10.2.9",
        "PAN-OS 10.2.8-h21",
        "PAN-OS 10.2.8-h20",
        "PAN-OS 10.2.8-h19",
        "PAN-OS 10.2.8-h18",
        "PAN-OS 10.2.8-h17",
        "PAN-OS 10.2.8-h16",
        "PAN-OS 10.2.8-h15",
        "PAN-OS 10.2.8-h14",
        "PAN-OS 10.2.8-h13",
        "PAN-OS 10.2.8-h12",
        "PAN-OS 10.2.8-h11",
        "PAN-OS 10.2.8-h10",
        "PAN-OS 10.2.8-h9",
        "PAN-OS 10.2.8-h8",
        "PAN-OS 10.2.8-h7",
        "PAN-OS 10.2.8-h6",
        "PAN-OS 10.2.8-h5",
        "PAN-OS 10.2.8-h4",
        "PAN-OS 10.2.8-h3",
        "PAN-OS 10.2.8-h2",
        "PAN-OS 10.2.8-h1",
        "PAN-OS 10.2.8",
        "PAN-OS 10.2.7-h37",
        "PAN-OS 10.2.7-h36",
        "PAN-OS 10.2.7-h35",
        "PAN-OS 10.2.7-h34",
        "PAN-OS 10.2.7-h32",
        "PAN-OS 10.2.7-h24",
        "PAN-OS 10.2.7-h23",
        "PAN-OS 10.2.7-h22",
        "PAN-OS 10.2.7-h21",
        "PAN-OS 10.2.7-h20",
        "PAN-OS 10.2.7-h19",
        "PAN-OS 10.2.7-h18",
        "PAN-OS 10.2.7-h17",
        "PAN-OS 10.2.7-h16",
        "PAN-OS 10.2.7-h15",
        "PAN-OS 10.2.7-h14",
        "PAN-OS 10.2.7-h13",
        "PAN-OS 10.2.7-h12",
        "PAN-OS 10.2.7-h11",
        "PAN-OS 10.2.7-h10",
        "PAN-OS 10.2.7-h9",
        "PAN-OS 10.2.7-h8",
        "PAN-OS 10.2.7-h7",
        "PAN-OS 10.2.7-h6",
        "PAN-OS 10.2.7-h5",
        "PAN-OS 10.2.7-h4",
        "PAN-OS 10.2.7-h3",
        "PAN-OS 10.2.7-h2",
        "PAN-OS 10.2.7-h1",
        "PAN-OS 10.2.7",
        "PAN-OS 10.2.6-h6",
        "PAN-OS 10.2.6-h5",
        "PAN-OS 10.2.6-h4",
        "PAN-OS 10.2.6-h3",
        "PAN-OS 10.2.6-h2",
        "PAN-OS 10.2.6-h1",
        "PAN-OS 10.2.6",
        "PAN-OS 10.2.5-h9",
        "PAN-OS 10.2.5-h8",
        "PAN-OS 10.2.5-h7",
        "PAN-OS 10.2.5-h6",
        "PAN-OS 10.2.5-h5",
        "PAN-OS 10.2.5-h4",
        "PAN-OS 10.2.5-h3",
        "PAN-OS 10.2.5-h2",
        "PAN-OS 10.2.5-h1",
        "PAN-OS 10.2.5",
        "PAN-OS 10.2.4-h32",
        "PAN-OS 10.2.4-h31",
        "PAN-OS 10.2.4-h30",
        "PAN-OS 10.2.4-h29",
        "PAN-OS 10.2.4-h28",
        "PAN-OS 10.2.4-h27",
        "PAN-OS 10.2.4-h26",
        "PAN-OS 10.2.4-h25",
        "PAN-OS 10.2.4-h24",
        "PAN-OS 10.2.4-h23",
        "PAN-OS 10.2.4-h22",
        "PAN-OS 10.2.4-h21",
        "PAN-OS 10.2.4-h20",
        "PAN-OS 10.2.4-h19",
        "PAN-OS 10.2.4-h18",
        "PAN-OS 10.2.4-h17",
        "PAN-OS 10.2.4-h16",
        "PAN-OS 10.2.4-h15",
        "PAN-OS 10.2.4-h14",
        "PAN-OS 10.2.4-h13",
        "PAN-OS 10.2.4-h12",
        "PAN-OS 10.2.4-h11",
        "PAN-OS 10.2.4-h10",
        "PAN-OS 10.2.4-h9",
        "PAN-OS 10.2.4-h8",
        "PAN-OS 10.2.4-h7",
        "PAN-OS 10.2.4-h6",
        "PAN-OS 10.2.4-h5",
        "PAN-OS 10.2.4-h4",
        "PAN-OS 10.2.4-h3",
        "PAN-OS 10.2.4-h2",
        "PAN-OS 10.2.4-h1",
        "PAN-OS 10.2.4",
        "PAN-OS 10.2.3-h14",
        "PAN-OS 10.2.3-h13",
        "PAN-OS 10.2.3-h12",
        "PAN-OS 10.2.3-h11",
        "PAN-OS 10.2.3-h10",
        "PAN-OS 10.2.3-h9",
        "PAN-OS 10.2.3-h8",
        "PAN-OS 10.2.3-h7",
        "PAN-OS 10.2.3-h6",
        "PAN-OS 10.2.3-h5",
        "PAN-OS 10.2.3-h4",
        "PAN-OS 10.2.3-h3",
        "PAN-OS 10.2.3-h2",
        "PAN-OS 10.2.3-h1",
        "PAN-OS 10.2.3",
        "PAN-OS 10.2.2-h6",
        "PAN-OS 10.2.2-h5",
        "PAN-OS 10.2.2-h4",
        "PAN-OS 10.2.2-h3",
        "PAN-OS 10.2.2-h2",
        "PAN-OS 10.2.2-h1",
        "PAN-OS 10.2.2",
        "PAN-OS 10.2.1-h3",
        "PAN-OS 10.2.1-h2",
        "PAN-OS 10.2.1-h1",
        "PAN-OS 10.2.1",
        "PAN-OS 10.2.0-h4",
        "PAN-OS 10.2.0-h3",
        "PAN-OS 10.2.0-h2",
        "PAN-OS 10.2.0-h1",
        "PAN-OS 10.2.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0321",
    "datePublished": "2026-10-14T19:58:55.823Z",
    "dateReserved": "2025-11-03T20:45:21.054Z",
    "dateUpdated": "2026-10-15T19:31:16.341Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-0322 (GCVE-0-2026-0322)

    Vulnerability from cvelistv5 – Published: 2026-10-14 17:26 – Updated: 2026-10-15 03:57
    VLAI CISA Previdian
    Title
    PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface
    Summary
    A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma® Access are not impacted by this vulnerability.
    Severity
    8.6 (High)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:N/R:U/V:D/RE:M/U:Red
    8.5 (High)
    CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:N/R:U/V:D/RE:M/U:Red
    SSVC
    Exploitation: active Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-14 00:00 UTC
    CWE
    • CWE-94 - Improper Control of Generation of Code ('Code Injection')
    Assigner
    palo_alto CNA under the mitre root
    CNA scorecard A 95/100 over 96 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Palo Alto Networks Cloud NGFW Unaffected: All (custom)
    		Create a notification for this product.
    Palo Alto Networks PAN-OS Affected: 12.2.0 , < 12.2.4 (custom)
    Affected: 12.1.0 , < 12.1.10-h2 (custom)
    Affected: 11.2.0 , < 11.2.16 (custom)
    Affected: 11.1.0 , < 11.1.16-h3 (custom)
    Affected: 10.2.0 , < 10.2.18-h12 (custom)
        cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h33:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h32:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h30:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h28:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h27:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h26:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h25:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h38:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h36:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h35:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h34:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h33:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h32:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h36:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h35:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h34:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h33:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h25:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h24:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h23:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h22:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h40:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h39:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h37:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h36:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h37:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h36:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h35:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h34:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h32:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h24:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h23:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h22:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h21:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h20:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h19:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h18:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h17:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h16:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h15:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h14:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h13:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h12:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h11:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h10:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h9:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h8:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h7:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h6:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h5:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h4:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h3:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h2:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h1:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:-:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*
        cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*
    		Create a notification for this product.
    Palo Alto Networks Prisma Access Unaffected: All (custom)
    		Create a notification for this product.
    Date Public
    2026-10-14 16:00
    Credits
    Suraj Siddharudh (internal reporter)
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0322",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-14T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2026-10-14",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-0322"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T03:57:17.169Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-0322"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-10-14T00:00:00.000Z",
            "value": "CVE-2026-0322 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Cloud NGFW",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h20:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h19:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h20:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h33:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h32:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h30:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h28:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h27:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h26:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h25:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h38:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h35:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h34:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h33:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h32:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h29:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h25:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h22:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h20:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h19:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h35:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h34:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h33:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h32:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h27:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h25:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h25:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h24:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h22:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h16:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h40:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h39:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h37:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h37:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h35:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h34:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h32:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h24:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h22:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h20:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h19:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h16:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "PAN-OS",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.2.4",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.2.4",
              "status": "affected",
              "version": "12.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "12.1.4-h12",
                  "status": "unaffected"
                },
                {
                  "at": "12.1.7-h8",
                  "status": "unaffected"
                },
                {
                  "at": "12.1.10-h2",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.1.10-h2",
              "status": "affected",
              "version": "12.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.2.4-h22",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.7-h21",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.10-h15",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.13-h3",
                  "status": "unaffected"
                },
                {
                  "at": "11.2.16",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.2.16",
              "status": "affected",
              "version": "11.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.1.4-h37",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.6-h39",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.7-h11",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.10-h35",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.13-h15",
                  "status": "unaffected"
                },
                {
                  "at": "11.1.16-h3",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.1.16-h3",
              "status": "affected",
              "version": "11.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "10.2.7-h38",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.10-h41",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.13-h26",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.16-h11",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.18-h12",
                  "status": "unaffected"
                }
              ],
              "lessThan": "10.2.18-h12",
              "status": "affected",
              "version": "10.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Prisma Access",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:cloud_ngfw:all:*:*:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.2.4",
                  "versionStartIncluding": "12.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.1.10-h2",
                  "versionStartIncluding": "12.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.2.16",
                  "versionStartIncluding": "11.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.1.16-h3",
                  "versionStartIncluding": "11.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.2.18-h12",
                  "versionStartIncluding": "10.2.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:prisma_access:all:*:*:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Suraj Siddharudh (internal reporter)"
        }
      ],
      "datePublic": "2026-10-14T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS\u00ae software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.\u003c/p\u003e\u003cp\u003eThe security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended\u0026nbsp;\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431\"\u003ebest practice deployment guidelines\u003c/a\u003e.\u003c/p\u003e\u003cp\u003eThis issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).\u003c/p\u003e\u003cp\u003eCloud NGFW and Prisma\u00ae Access are not impacted by this vulnerability.\u003c/p\u003e"
            }
          ],
          "value": "A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS\u00ae software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.\n\n\n\nThe security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended\u00a0 best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .\n\n\n\nThis issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).\n\n\n\nCloud NGFW and Prisma\u00ae Access are not impacted by this vulnerability."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003eVery limited exploitation has been observed targeting the Palo Alto Networks management interface.\u003c/span\u003e"
            }
          ],
          "value": "Very limited exploitation has been observed targeting the Palo Alto Networks management interface."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-242",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-242 Code Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "exploitMaturity": "ATTACKED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "RED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:N/R:U/V:D/RE:M/U:Red",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "The risk is highest when you allow access to the management interface from external IP addresses on the internet. Our recommendation is to remediate as soon as possible."
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "ADJACENT",
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "exploitMaturity": "ATTACKED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "RED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:N/R:U/V:D/RE:M/U:Red",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "You can reduce the risk of exploitation by restricting access to a jump box that is the only system allowed to access the management interface."
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-14T17:26:52.448Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0322"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 12.2\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.2.0 through 12.2.3\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.2.4 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 12.1\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.1.8 through 12.1.10-h* \u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.1.10-h2 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.1.5 through 12.1.7-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.1.7-h8 or 12.1.10-h2 or later.\u003cbr\u003e\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e12.1.2 through 12.1.4-h*\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 12.1.4-h12 or 12.1.10-h2 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 11.2\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.14 through 11.2.15 \u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.11 through 11.2.13-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.13-h3 or 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.8 through 11.2.10-h*\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.10-h15 or 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.5 through 11.2.7-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.7-h21 or 11.2.16 or later.\u003cbr\u003e\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.2.0 through 11.2.4-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.2.4-h22 or 11.2.16 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 11.1\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.14 through 11.1.16-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.11 through 11.1.13-h*\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.13-h15 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.8 through 11.1.10-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.10-h35 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.7 through 11.1.7-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.7-h11 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.5 through 11.1.6-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.6-h39 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e11.1.0 through 11.1.4-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 11.1.4-h37 or 11.1.16-h3 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003ePAN-OS 10.2\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.17 through 10.2.18-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.14 through 10.2.16-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.16-h11 or 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.11 through 10.2.13-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.13-h26 or 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.8 through 10.2.10-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.10-h41 or 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003e\u003c/td\u003e\n                                \u003ctd\u003e10.2.0 through 10.2.7-h*\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 10.2.7-h38 or 10.2.18-h12 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "Version\nMinor Version\nSuggested Solution\n\n                                PAN-OS 12.2\n\n                                12.2.0 through 12.2.3\n                                Upgrade to 12.2.4 or later.\n                            \n                                PAN-OS 12.1\n\n                                12.1.8 through 12.1.10-h* \n                                Upgrade to 12.1.10-h2 or later.\n                            \n                                \n                                12.1.5 through 12.1.7-h*\n                                Upgrade to 12.1.7-h8 or 12.1.10-h2 or later.\n\n                            \n                                \n                                12.1.2 through 12.1.4-h*\n\n                                Upgrade to 12.1.4-h12 or 12.1.10-h2 or later.\n                            \n                                PAN-OS 11.2\n\n                                11.2.14 through 11.2.15 \n                                Upgrade to 11.2.16 or later.\n                            \n                                \n                                11.2.11 through 11.2.13-h*\n                                Upgrade to 11.2.13-h3 or 11.2.16 or later.\n                            \n                                \n                                11.2.8 through 11.2.10-h*\n\n                                Upgrade to 11.2.10-h15 or 11.2.16 or later.\n                            \n                                \n                                11.2.5 through 11.2.7-h*\n                                Upgrade to 11.2.7-h21 or 11.2.16 or later.\n\n                            \n                                \n                                11.2.0 through 11.2.4-h*\n                                Upgrade to 11.2.4-h22 or 11.2.16 or later.\n                            \n                                PAN-OS 11.1\n\n                                11.1.14 through 11.1.16-h*\n                                Upgrade to 11.1.16-h3 or later.\n                            \n                                \n                                11.1.11 through 11.1.13-h*\n\n                                Upgrade to 11.1.13-h15 or 11.1.16-h3 or later.\n                            \n                                \n                                11.1.8 through 11.1.10-h*\n                                Upgrade to 11.1.10-h35 or 11.1.16-h3 or later.\n                            \n                                \n                                11.1.7 through 11.1.7-h*\n                                Upgrade to 11.1.7-h11 or 11.1.16-h3 or later.\n                            \n                                \n                                11.1.5 through 11.1.6-h*\n                                Upgrade to 11.1.6-h39 or 11.1.16-h3 or later.\n                            \n                                \n                                11.1.0 through 11.1.4-h*\n                                Upgrade to 11.1.4-h37 or 11.1.16-h3 or later.\n                            \n                                PAN-OS 10.2\n\n                                10.2.17 through 10.2.18-h*\n                                Upgrade to 10.2.18-h12 or later.\n                            \n                                \n                                10.2.14 through 10.2.16-h*\n                                Upgrade to 10.2.16-h11 or 10.2.18-h12 or later.\n                            \n                                \n                                10.2.11 through 10.2.13-h*\n                                Upgrade to 10.2.13-h26 or 10.2.18-h12 or later.\n                            \n                                \n                                10.2.8 through 10.2.10-h*\n                                Upgrade to 10.2.10-h41 or 10.2.18-h12 or later.\n                            \n                                \n                                10.2.0 through 10.2.7-h*\n                                Upgrade to 10.2.7-h38 or 10.2.18-h12 or later."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-14T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNo known workarounds exist for this issue.\u003c/p\u003e\u003cp\u003eCustomers with a Threat Prevention subscription are provided with limited coverage against this vulnerability by enabling Threat ID\u0026nbsp;510046 and 510047 (from Applications and Threats content version 9159-10287 and later). For these Threat IDs to protect against attacks for this vulnerability:\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices#id59206398-3dab-4b2f-9b4b-7ea500d036ba\"\u003eRoute incoming traffic for the MGT port through a DP port\u003c/a\u003e, e.g., enabling management profile on a DP interface for management access.\u003cbr\u003e\u003c/li\u003e\u003cli\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices#id112f7714-8995-4496-bbf9-781e63dec71c\"\u003eReplace the Certificate for Inbound Traffic Management\u003c/a\u003e.\u003c/li\u003e\u003cli\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices#idbbd82587-17a2-42b4-9245-d3714e1e13a2\"\u003eDecrypt inbound traffic to the management interface so the firewall can inspect it\u003c/a\u003e.\u003c/li\u003e\u003cli\u003eEnable threat prevention on the inbound traffic to management services.\u003c/li\u003e\u003c/ul\u003e\u003cp\u003ePlease note that this Threat ID requires SSL Decryption.\u003c/p\u003e\u003cp\u003e\u003c/p\u003e"
            }
          ],
          "value": "No known workarounds exist for this issue.\n\n\n\nCustomers with a Threat Prevention subscription are provided with limited coverage against this vulnerability by enabling Threat ID\u00a0510046 and 510047 (from Applications and Threats content version 9159-10287 and later). For these Threat IDs to protect against attacks for this vulnerability:\n\n\n\n\n\n  *   Route incoming traffic for the MGT port through a DP port https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices#id59206398-3dab-4b2f-9b4b-7ea500d036ba , e.g., enabling management profile on a DP interface for management access.\n\n  *   Replace the Certificate for Inbound Traffic Management https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices#id112f7714-8995-4496-bbf9-781e63dec71c .\n  *   Decrypt inbound traffic to the management interface so the firewall can inspect it https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices#idbbd82587-17a2-42b4-9245-d3714e1e13a2 .\n  *  Enable threat prevention on the inbound traffic to management services.\n\n\n\n\nPlease note that this Threat ID requires SSL Decryption."
        }
      ],
      "x_affectedList": [
        "PAN-OS 12.2.3",
        "PAN-OS 12.2.2",
        "PAN-OS 12.1.10",
        "PAN-OS 12.1.9",
        "PAN-OS 12.1.8",
        "PAN-OS 12.1.7-h6",
        "PAN-OS 12.1.7-h5",
        "PAN-OS 12.1.7-h3",
        "PAN-OS 12.1.7-h2",
        "PAN-OS 12.1.7-h1",
        "PAN-OS 12.1.7",
        "PAN-OS 12.1.6",
        "PAN-OS 12.1.5",
        "PAN-OS 12.1.4-h11",
        "PAN-OS 12.1.4-h10",
        "PAN-OS 12.1.4-h9",
        "PAN-OS 12.1.4-h8",
        "PAN-OS 12.1.4-h7",
        "PAN-OS 12.1.4-h6",
        "PAN-OS 12.1.4-h5",
        "PAN-OS 12.1.4-h3",
        "PAN-OS 12.1.4-h2",
        "PAN-OS 12.1.4",
        "PAN-OS 12.1.3-h3",
        "PAN-OS 12.1.3-h1",
        "PAN-OS 12.1.3",
        "PAN-OS 12.1.2",
        "PAN-OS 11.2.15",
        "PAN-OS 11.2.13-h2",
        "PAN-OS 11.2.13-h1",
        "PAN-OS 11.2.13",
        "PAN-OS 11.2.12",
        "PAN-OS 11.2.11",
        "PAN-OS 11.2.10-h14",
        "PAN-OS 11.2.10-h13",
        "PAN-OS 11.2.10-h12",
        "PAN-OS 11.2.10-h10",
        "PAN-OS 11.2.10-h9",
        "PAN-OS 11.2.10-h8",
        "PAN-OS 11.2.10-h7",
        "PAN-OS 11.2.10-h6",
        "PAN-OS 11.2.10-h5",
        "PAN-OS 11.2.10-h4",
        "PAN-OS 11.2.10-h3",
        "PAN-OS 11.2.10-h2",
        "PAN-OS 11.2.10-h1",
        "PAN-OS 11.2.10",
        "PAN-OS 11.2.9",
        "PAN-OS 11.2.8",
        "PAN-OS 11.2.7-h20",
        "PAN-OS 11.2.7-h19",
        "PAN-OS 11.2.7-h18",
        "PAN-OS 11.2.7-h17",
        "PAN-OS 11.2.7-h16",
        "PAN-OS 11.2.7-h15",
        "PAN-OS 11.2.7-h14",
        "PAN-OS 11.2.7-h13",
        "PAN-OS 11.2.7-h12",
        "PAN-OS 11.2.7-h11",
        "PAN-OS 11.2.7-h10",
        "PAN-OS 11.2.7-h8",
        "PAN-OS 11.2.7-h7",
        "PAN-OS 11.2.7-h4",
        "PAN-OS 11.2.7-h3",
        "PAN-OS 11.2.7-h2",
        "PAN-OS 11.2.7-h1",
        "PAN-OS 11.2.7",
        "PAN-OS 11.2.6",
        "PAN-OS 11.2.5",
        "PAN-OS 11.2.4-h21",
        "PAN-OS 11.2.4-h20",
        "PAN-OS 11.2.4-h18",
        "PAN-OS 11.2.4-h17",
        "PAN-OS 11.2.4-h15",
        "PAN-OS 11.2.4-h14",
        "PAN-OS 11.2.4-h12",
        "PAN-OS 11.2.4-h11",
        "PAN-OS 11.2.4-h10",
        "PAN-OS 11.2.4-h9",
        "PAN-OS 11.2.4-h8",
        "PAN-OS 11.2.4-h7",
        "PAN-OS 11.2.4-h6",
        "PAN-OS 11.2.4-h5",
        "PAN-OS 11.2.4-h4",
        "PAN-OS 11.2.4-h3",
        "PAN-OS 11.2.4-h2",
        "PAN-OS 11.2.4-h1",
        "PAN-OS 11.2.4",
        "PAN-OS 11.2.3-h5",
        "PAN-OS 11.2.3-h4",
        "PAN-OS 11.2.3-h3",
        "PAN-OS 11.2.3-h2",
        "PAN-OS 11.2.3-h1",
        "PAN-OS 11.2.3",
        "PAN-OS 11.2.2-h2",
        "PAN-OS 11.2.2-h1",
        "PAN-OS 11.2.1-h1",
        "PAN-OS 11.2.1",
        "PAN-OS 11.2.0-h1",
        "PAN-OS 11.2.0",
        "PAN-OS 11.1.16-h2",
        "PAN-OS 11.1.16-h1",
        "PAN-OS 11.1.16",
        "PAN-OS 11.1.15",
        "PAN-OS 11.1.14",
        "PAN-OS 11.1.13-h12",
        "PAN-OS 11.1.13-h11",
        "PAN-OS 11.1.13-h10",
        "PAN-OS 11.1.13-h9",
        "PAN-OS 11.1.13-h8",
        "PAN-OS 11.1.13-h7",
        "PAN-OS 11.1.13-h6",
        "PAN-OS 11.1.13-h5",
        "PAN-OS 11.1.13-h3",
        "PAN-OS 11.1.13-h2",
        "PAN-OS 11.1.13-h1",
        "PAN-OS 11.1.13",
        "PAN-OS 11.1.12",
        "PAN-OS 11.1.11",
        "PAN-OS 11.1.10-h33",
        "PAN-OS 11.1.10-h32",
        "PAN-OS 11.1.10-h30",
        "PAN-OS 11.1.10-h28",
        "PAN-OS 11.1.10-h27",
        "PAN-OS 11.1.10-h26",
        "PAN-OS 11.1.10-h25",
        "PAN-OS 11.1.10-h21",
        "PAN-OS 11.1.10-h12",
        "PAN-OS 11.1.10-h10",
        "PAN-OS 11.1.10-h9",
        "PAN-OS 11.1.10-h7",
        "PAN-OS 11.1.10-h5",
        "PAN-OS 11.1.10-h4",
        "PAN-OS 11.1.10-h1",
        "PAN-OS 11.1.10",
        "PAN-OS 11.1.9",
        "PAN-OS 11.1.8",
        "PAN-OS 11.1.6-h38",
        "PAN-OS 11.1.6-h36",
        "PAN-OS 11.1.6-h35",
        "PAN-OS 11.1.6-h34",
        "PAN-OS 11.1.6-h33",
        "PAN-OS 11.1.6-h32",
        "PAN-OS 11.1.6-h29",
        "PAN-OS 11.1.6-h25",
        "PAN-OS 11.1.6-h23",
        "PAN-OS 11.1.6-h22",
        "PAN-OS 11.1.6-h21",
        "PAN-OS 11.1.6-h20",
        "PAN-OS 11.1.6-h19",
        "PAN-OS 11.1.6-h18",
        "PAN-OS 11.1.6-h17",
        "PAN-OS 11.1.6-h14",
        "PAN-OS 11.1.6-h10",
        "PAN-OS 11.1.6-h7",
        "PAN-OS 11.1.6-h6",
        "PAN-OS 11.1.6-h4",
        "PAN-OS 11.1.6-h3",
        "PAN-OS 11.1.6-h2",
        "PAN-OS 11.1.6-h1",
        "PAN-OS 11.1.6",
        "PAN-OS 11.1.5-h1",
        "PAN-OS 11.1.5",
        "PAN-OS 11.1.4-h36",
        "PAN-OS 11.1.4-h35",
        "PAN-OS 11.1.4-h34",
        "PAN-OS 11.1.4-h33",
        "PAN-OS 11.1.4-h32",
        "PAN-OS 11.1.4-h27",
        "PAN-OS 11.1.4-h25",
        "PAN-OS 11.1.4-h18",
        "PAN-OS 11.1.4-h17",
        "PAN-OS 11.1.4-h15",
        "PAN-OS 11.1.4-h13",
        "PAN-OS 11.1.4-h12",
        "PAN-OS 11.1.4-h11",
        "PAN-OS 11.1.4-h10",
        "PAN-OS 11.1.4-h9",
        "PAN-OS 11.1.4-h8",
        "PAN-OS 11.1.4-h7",
        "PAN-OS 11.1.4-h6",
        "PAN-OS 11.1.4-h5",
        "PAN-OS 11.1.4-h4",
        "PAN-OS 11.1.4-h3",
        "PAN-OS 11.1.4-h2",
        "PAN-OS 11.1.4-h1",
        "PAN-OS 11.1.4",
        "PAN-OS 11.1.3-h13",
        "PAN-OS 11.1.3-h12",
        "PAN-OS 11.1.3-h11",
        "PAN-OS 11.1.3-h10",
        "PAN-OS 11.1.3-h9",
        "PAN-OS 11.1.3-h8",
        "PAN-OS 11.1.3-h7",
        "PAN-OS 11.1.3-h6",
        "PAN-OS 11.1.3-h5",
        "PAN-OS 11.1.3-h4",
        "PAN-OS 11.1.3-h3",
        "PAN-OS 11.1.3-h2",
        "PAN-OS 11.1.3-h1",
        "PAN-OS 11.1.3",
        "PAN-OS 11.1.2-h18",
        "PAN-OS 11.1.2-h17",
        "PAN-OS 11.1.2-h16",
        "PAN-OS 11.1.2-h15",
        "PAN-OS 11.1.2-h14",
        "PAN-OS 11.1.2-h13",
        "PAN-OS 11.1.2-h12",
        "PAN-OS 11.1.2-h11",
        "PAN-OS 11.1.2-h10",
        "PAN-OS 11.1.2-h9",
        "PAN-OS 11.1.2-h8",
        "PAN-OS 11.1.2-h7",
        "PAN-OS 11.1.2-h6",
        "PAN-OS 11.1.2-h5",
        "PAN-OS 11.1.2-h4",
        "PAN-OS 11.1.2-h3",
        "PAN-OS 11.1.2-h2",
        "PAN-OS 11.1.2-h1",
        "PAN-OS 11.1.2",
        "PAN-OS 11.1.1-h2",
        "PAN-OS 11.1.1-h1",
        "PAN-OS 11.1.1",
        "PAN-OS 11.1.0-h4",
        "PAN-OS 11.1.0-h3",
        "PAN-OS 11.1.0-h2",
        "PAN-OS 11.1.0-h1",
        "PAN-OS 11.1.0",
        "PAN-OS 10.2.18-h10",
        "PAN-OS 10.2.18-h9",
        "PAN-OS 10.2.18-h8",
        "PAN-OS 10.2.18-h7",
        "PAN-OS 10.2.18-h6",
        "PAN-OS 10.2.18-h5",
        "PAN-OS 10.2.18-h1",
        "PAN-OS 10.2.18",
        "PAN-OS 10.2.17",
        "PAN-OS 10.2.16-h10",
        "PAN-OS 10.2.16-h9",
        "PAN-OS 10.2.16-h8",
        "PAN-OS 10.2.16-h7",
        "PAN-OS 10.2.16-h6",
        "PAN-OS 10.2.16-h4",
        "PAN-OS 10.2.16-h1",
        "PAN-OS 10.2.16",
        "PAN-OS 10.2.15",
        "PAN-OS 10.2.14-h1",
        "PAN-OS 10.2.14",
        "PAN-OS 10.2.13-h24",
        "PAN-OS 10.2.13-h23",
        "PAN-OS 10.2.13-h22",
        "PAN-OS 10.2.13-h21",
        "PAN-OS 10.2.13-h18",
        "PAN-OS 10.2.13-h16",
        "PAN-OS 10.2.13-h15",
        "PAN-OS 10.2.13-h10",
        "PAN-OS 10.2.13-h7",
        "PAN-OS 10.2.13-h5",
        "PAN-OS 10.2.13-h4",
        "PAN-OS 10.2.13-h3",
        "PAN-OS 10.2.13-h2",
        "PAN-OS 10.2.13-h1",
        "PAN-OS 10.2.13",
        "PAN-OS 10.2.12-h6",
        "PAN-OS 10.2.12-h5",
        "PAN-OS 10.2.12-h4",
        "PAN-OS 10.2.12-h3",
        "PAN-OS 10.2.12-h2",
        "PAN-OS 10.2.12-h1",
        "PAN-OS 10.2.12",
        "PAN-OS 10.2.11-h13",
        "PAN-OS 10.2.11-h12",
        "PAN-OS 10.2.11-h11",
        "PAN-OS 10.2.11-h10",
        "PAN-OS 10.2.11-h9",
        "PAN-OS 10.2.11-h8",
        "PAN-OS 10.2.11-h7",
        "PAN-OS 10.2.11-h6",
        "PAN-OS 10.2.11-h5",
        "PAN-OS 10.2.11-h4",
        "PAN-OS 10.2.11-h3",
        "PAN-OS 10.2.11-h2",
        "PAN-OS 10.2.11-h1",
        "PAN-OS 10.2.11",
        "PAN-OS 10.2.10-h40",
        "PAN-OS 10.2.10-h39",
        "PAN-OS 10.2.10-h37",
        "PAN-OS 10.2.10-h36",
        "PAN-OS 10.2.10-h31",
        "PAN-OS 10.2.10-h30",
        "PAN-OS 10.2.10-h27",
        "PAN-OS 10.2.10-h26",
        "PAN-OS 10.2.10-h23",
        "PAN-OS 10.2.10-h21",
        "PAN-OS 10.2.10-h18",
        "PAN-OS 10.2.10-h17",
        "PAN-OS 10.2.10-h14",
        "PAN-OS 10.2.10-h13",
        "PAN-OS 10.2.10-h12",
        "PAN-OS 10.2.10-h11",
        "PAN-OS 10.2.10-h10",
        "PAN-OS 10.2.10-h9",
        "PAN-OS 10.2.10-h8",
        "PAN-OS 10.2.10-h7",
        "PAN-OS 10.2.10-h6",
        "PAN-OS 10.2.10-h5",
        "PAN-OS 10.2.10-h4",
        "PAN-OS 10.2.10-h3",
        "PAN-OS 10.2.10-h2",
        "PAN-OS 10.2.10-h1",
        "PAN-OS 10.2.10",
        "PAN-OS 10.2.9-h21",
        "PAN-OS 10.2.9-h20",
        "PAN-OS 10.2.9-h19",
        "PAN-OS 10.2.9-h18",
        "PAN-OS 10.2.9-h17",
        "PAN-OS 10.2.9-h16",
        "PAN-OS 10.2.9-h15",
        "PAN-OS 10.2.9-h14",
        "PAN-OS 10.2.9-h13",
        "PAN-OS 10.2.9-h12",
        "PAN-OS 10.2.9-h11",
        "PAN-OS 10.2.9-h10",
        "PAN-OS 10.2.9-h9",
        "PAN-OS 10.2.9-h8",
        "PAN-OS 10.2.9-h7",
        "PAN-OS 10.2.9-h6",
        "PAN-OS 10.2.9-h5",
        "PAN-OS 10.2.9-h4",
        "PAN-OS 10.2.9-h3",
        "PAN-OS 10.2.9-h2",
        "PAN-OS 10.2.9-h1",
        "PAN-OS 10.2.9",
        "PAN-OS 10.2.8-h21",
        "PAN-OS 10.2.8-h20",
        "PAN-OS 10.2.8-h19",
        "PAN-OS 10.2.8-h18",
        "PAN-OS 10.2.8-h17",
        "PAN-OS 10.2.8-h16",
        "PAN-OS 10.2.8-h15",
        "PAN-OS 10.2.8-h14",
        "PAN-OS 10.2.8-h13",
        "PAN-OS 10.2.8-h12",
        "PAN-OS 10.2.8-h11",
        "PAN-OS 10.2.8-h10",
        "PAN-OS 10.2.8-h9",
        "PAN-OS 10.2.8-h8",
        "PAN-OS 10.2.8-h7",
        "PAN-OS 10.2.8-h6",
        "PAN-OS 10.2.8-h5",
        "PAN-OS 10.2.8-h4",
        "PAN-OS 10.2.8-h3",
        "PAN-OS 10.2.8-h2",
        "PAN-OS 10.2.8-h1",
        "PAN-OS 10.2.8",
        "PAN-OS 10.2.7-h37",
        "PAN-OS 10.2.7-h36",
        "PAN-OS 10.2.7-h35",
        "PAN-OS 10.2.7-h34",
        "PAN-OS 10.2.7-h32",
        "PAN-OS 10.2.7-h24",
        "PAN-OS 10.2.7-h23",
        "PAN-OS 10.2.7-h22",
        "PAN-OS 10.2.7-h21",
        "PAN-OS 10.2.7-h20",
        "PAN-OS 10.2.7-h19",
        "PAN-OS 10.2.7-h18",
        "PAN-OS 10.2.7-h17",
        "PAN-OS 10.2.7-h16",
        "PAN-OS 10.2.7-h15",
        "PAN-OS 10.2.7-h14",
        "PAN-OS 10.2.7-h13",
        "PAN-OS 10.2.7-h12",
        "PAN-OS 10.2.7-h11",
        "PAN-OS 10.2.7-h10",
        "PAN-OS 10.2.7-h9",
        "PAN-OS 10.2.7-h8",
        "PAN-OS 10.2.7-h7",
        "PAN-OS 10.2.7-h6",
        "PAN-OS 10.2.7-h5",
        "PAN-OS 10.2.7-h4",
        "PAN-OS 10.2.7-h3",
        "PAN-OS 10.2.7-h2",
        "PAN-OS 10.2.7-h1",
        "PAN-OS 10.2.7",
        "PAN-OS 10.2.6-h6",
        "PAN-OS 10.2.6-h5",
        "PAN-OS 10.2.6-h4",
        "PAN-OS 10.2.6-h3",
        "PAN-OS 10.2.6-h2",
        "PAN-OS 10.2.6-h1",
        "PAN-OS 10.2.6",
        "PAN-OS 10.2.5-h9",
        "PAN-OS 10.2.5-h8",
        "PAN-OS 10.2.5-h7",
        "PAN-OS 10.2.5-h6",
        "PAN-OS 10.2.5-h5",
        "PAN-OS 10.2.5-h4",
        "PAN-OS 10.2.5-h3",
        "PAN-OS 10.2.5-h2",
        "PAN-OS 10.2.5-h1",
        "PAN-OS 10.2.5",
        "PAN-OS 10.2.4-h32",
        "PAN-OS 10.2.4-h31",
        "PAN-OS 10.2.4-h30",
        "PAN-OS 10.2.4-h29",
        "PAN-OS 10.2.4-h28",
        "PAN-OS 10.2.4-h27",
        "PAN-OS 10.2.4-h26",
        "PAN-OS 10.2.4-h25",
        "PAN-OS 10.2.4-h24",
        "PAN-OS 10.2.4-h23",
        "PAN-OS 10.2.4-h22",
        "PAN-OS 10.2.4-h21",
        "PAN-OS 10.2.4-h20",
        "PAN-OS 10.2.4-h19",
        "PAN-OS 10.2.4-h18",
        "PAN-OS 10.2.4-h17",
        "PAN-OS 10.2.4-h16",
        "PAN-OS 10.2.4-h15",
        "PAN-OS 10.2.4-h14",
        "PAN-OS 10.2.4-h13",
        "PAN-OS 10.2.4-h12",
        "PAN-OS 10.2.4-h11",
        "PAN-OS 10.2.4-h10",
        "PAN-OS 10.2.4-h9",
        "PAN-OS 10.2.4-h8",
        "PAN-OS 10.2.4-h7",
        "PAN-OS 10.2.4-h6",
        "PAN-OS 10.2.4-h5",
        "PAN-OS 10.2.4-h4",
        "PAN-OS 10.2.4-h3",
        "PAN-OS 10.2.4-h2",
        "PAN-OS 10.2.4-h1",
        "PAN-OS 10.2.4",
        "PAN-OS 10.2.3-h14",
        "PAN-OS 10.2.3-h13",
        "PAN-OS 10.2.3-h12",
        "PAN-OS 10.2.3-h11",
        "PAN-OS 10.2.3-h10",
        "PAN-OS 10.2.3-h9",
        "PAN-OS 10.2.3-h8",
        "PAN-OS 10.2.3-h7",
        "PAN-OS 10.2.3-h6",
        "PAN-OS 10.2.3-h5",
        "PAN-OS 10.2.3-h4",
        "PAN-OS 10.2.3-h3",
        "PAN-OS 10.2.3-h2",
        "PAN-OS 10.2.3-h1",
        "PAN-OS 10.2.3",
        "PAN-OS 10.2.2-h6",
        "PAN-OS 10.2.2-h5",
        "PAN-OS 10.2.2-h4",
        "PAN-OS 10.2.2-h3",
        "PAN-OS 10.2.2-h2",
        "PAN-OS 10.2.2-h1",
        "PAN-OS 10.2.2",
        "PAN-OS 10.2.1-h3",
        "PAN-OS 10.2.1-h2",
        "PAN-OS 10.2.1-h1",
        "PAN-OS 10.2.1",
        "PAN-OS 10.2.0-h4",
        "PAN-OS 10.2.0-h3",
        "PAN-OS 10.2.0-h2",
        "PAN-OS 10.2.0-h1",
        "PAN-OS 10.2.0"
      ],
      "x_cpeGeneratedAt": "2026-10-14T15:56:39.967Z",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0322",
    "datePublished": "2026-10-14T17:26:52.448Z",
    "dateReserved": "2025-11-03T20:46:23.966Z",
    "dateUpdated": "2026-10-15T03:57:17.169Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}