| 6.1 | CVE-2026-0330
PAN-OS: Authenticated Remote Code Execution (RCE) in Panorama | Cloud NGFW PAN-OS 12.2 PAN-OS 12.1 PAN-OS 11.2 PAN-OS 11.1 PAN-OS 10.2 Prisma Access | None < 12.2.4-h2 on Panorama < 12.1.4-h14 on Panorama, < 12.1.7-h12 on Panorama, < 12.1.10-h4 on Panorama < 11.2.4-h24 on Panorama, < 11.2.7-h24 on Panorama, < 11.2.10-h18 on Panorama, < 11.2.13-h5 on Panorama, < 11.2.16-h2 on Panorama < 11.1.4-h39 on Panorama, < 11.1.6-h41 on Panorama, < 11.1.7-h13 on Panorama, < 11.1.10-h37 on Panorama, < 11.1.13-h17 on Panorama, < 11.1.16-h5 on Panorama < 10.2.7-h40 on Panorama, < 10.2.10-h43 on Panorama, < 10.2.13-h28 on Panorama, < 10.2.16-h13 on Panorama, < 10.2.18-h14 on Panorama None | All >= 12.2.4-h2 on Panorama >= 12.1.4-h14 on Panorama, >= 12.1.7-h12 on Panorama, >= 12.1.10-h4 on Panorama >= 11.2.4-h24 on Panorama, >= 11.2.7-h24 on Panorama, >= 11.2.10-h18 on Panorama, >= 11.2.13-h5 on Panorama, >= 11.2.16-h2 on Panorama >= 11.1.4-h39 on Panorama, >= 11.1.6-h41 on Panorama, >= 11.1.7-h13 on Panorama, >= 11.1.10-h37 on Panorama, >= 11.1.13-h17 on Panorama, >= 11.1.16-h5 on Panorama >= 10.2.7-h40 on Panorama, >= 10.2.10-h43 on Panorama, >= 10.2.13-h28 on Panorama, >= 10.2.16-h13 on Panorama, >= 10.2.18-h14 on Panorama All | 2026-11-11 | 2026-11-11 |
| 2.3 | CVE-2026-0327
PAN-OS: Privilege Escalation Vulnerability in GlobalProtect | Cloud NGFW PAN-OS 12.2 PAN-OS 12.1 PAN-OS 11.2 PAN-OS 11.1 Prisma Access 12.1 Prisma Access 11.2 | None < 12.2.4-h2 < 12.1.10-h4 < 11.2.16-h2 < 11.1.16-h5 < 12.1.10-h4* All* | All >= 12.2.4-h2 >= 12.1.10-h4 >= 11.2.16-h2 >= 11.1.16-h5 >= 12.1.10-h4* None* | 2026-11-11 | 2026-11-11 |
| 4.6 | CVE-2026-0329
PAN-OS: Buffer Overflow Vulnerability | Cloud NGFW PAN-OS 12.2 PAN-OS 12.1 PAN-OS 11.2 PAN-OS 11.1 PAN-OS 10.2 Prisma Access 12.1 Prisma Access 11.2 Prisma Access 10.2 | None < 12.2.4-h2 < 12.1.4-h14, < 12.1.7-h12, < 12.1.10-h4 < 11.2.4-h24, < 11.2.7-h24, < 11.2.10-h18, < 11.2.13-h5, < 11.2.16-h2 < 11.1.4-h39, < 11.1.6-h41, < 11.1.7-h13, < 11.1.10-h37, < 11.1.13-h17, < 11.1.16-h5 < 10.2.7-h40, < 10.2.10-h43, < 10.2.13-h28, < 10.2.16-h13, < 10.2.18-h14 < 12.1.10-h4* < 11.2.7-h24* < 10.2.10-h43* | All >= 12.2.4-h2 >= 12.1.4-h14, >= 12.1.7-h12, >= 12.1.10-h4 >= 11.2.4-h24, >= 11.2.7-h24, >= 11.2.10-h18, >= 11.2.13-h5, >= 11.2.16-h2 >= 11.1.4-h39, >= 11.1.6-h41, >= 11.1.7-h13, >= 11.1.10-h37, >= 11.1.13-h17, >= 11.1.16-h5 >= 10.2.7-h40, >= 10.2.10-h43, >= 10.2.13-h28, >= 10.2.16-h13, >= 10.2.18-h14 >= 12.1.10-h4* >= 11.2.7-h24* >= 10.2.10-h43* | 2026-11-11 | 2026-11-11 |
| 2.7 | CVE-2026-0328
PAN-OS: User Impersonation through GlobalProtect Portal | Cloud NGFW PAN-OS 12.2 PAN-OS 12.1 PAN-OS 11.2 PAN-OS 11.1 PAN-OS 10.2 Prisma Access | None < 12.2.4-h2 < 12.1.4-h14, < 12.1.7-h12, < 12.1.10-h4 < 11.2.4-h24, < 11.2.7-h24, < 11.2.10-h18, < 11.2.13-h5, < 11.2.16-h2 < 11.1.4-h39, < 11.1.6-h41, < 11.1.7-h13, < 11.1.10-h37, < 11.1.13-h17, < 11.1.16-h5 < 10.2.7-h40, < 10.2.10-h43, < 10.2.13-h28, < 10.2.16-h13, < 10.2.18-h14 None | All >= 12.2.4-h2 >= 12.1.4-h14, >= 12.1.7-h12, >= 12.1.10-h4 >= 11.2.4-h24, >= 11.2.7-h24, >= 11.2.10-h18, >= 11.2.13-h5, >= 11.2.16-h2 >= 11.1.4-h39, >= 11.1.6-h41, >= 11.1.7-h13, >= 11.1.10-h37, >= 11.1.13-h17, >= 11.1.16-h5 >= 10.2.7-h40, >= 10.2.10-h43, >= 10.2.13-h28, >= 10.2.16-h13, >= 10.2.18-h14 All | 2026-11-11 | 2026-11-11 |
| 1.3 | CVE-2026-0325
PAN-OS: GlobalProtect Authorization Bypass Vulnerability | Cloud NGFW PAN-OS 12.2 PAN-OS 12.1 PAN-OS 11.2 PAN-OS 11.1 Prisma Access 12.1 Prisma Access 11.2 | None < 12.2.4-h2 < 12.1.10-h4 < 11.2.16-h2 < 11.1.16-h5 < 12.1.10-h4* All* | All >= 12.2.4-h2 >= 12.1.10-h4 >= 11.2.16-h2 >= 11.1.16-h5 >= 12.1.10-h4* None* | 2026-11-11 | 2026-11-11 |
| 7.7 | PAN-SA-2026-0014
Chromium: Monthly Vulnerability Update (November 2026) | | | | 2026-11-11 | 2026-11-11 |
| 6.6 | CVE-2026-0331
PAN-OS: Sensitive Information Disclosure Vulnerability | Cloud NGFW PAN-OS 12.2 PAN-OS 12.1 PAN-OS 11.2 PAN-OS 11.1 PAN-OS 10.2 Prisma Access 12.1 Prisma Access 11.2 Prisma Access 10.2 | All* < 12.2.4-h2 < 12.1.4-h14, < 12.1.7-h12, < 12.1.10-h4 < 11.2.4-h24, < 11.2.7-h24, < 11.2.10-h18, < 11.2.13-h5, < 11.2.16-h2 < 11.1.4-h39, < 11.1.6-h41, < 11.1.7-h13, < 11.1.10-h37, < 11.1.13-h17, < 11.1.16-h5 < 10.2.7-h40, < 10.2.10-h43, < 10.2.13-h28, < 10.2.16-h13, < 10.2.18-h14 < 12.1.10-h4* < 11.2.7-h24* < 10.2.10-h43* | None* >= 12.2.4-h2 >= 12.1.4-h14, >= 12.1.7-h12, >= 12.1.10-h4 >= 11.2.4-h24, >= 11.2.7-h24, >= 11.2.10-h18, >= 11.2.13-h5, >= 11.2.16-h2 >= 11.1.4-h39, >= 11.1.6-h41, >= 11.1.7-h13, >= 11.1.10-h37, >= 11.1.13-h17, >= 11.1.16-h5 >= 10.2.7-h40, >= 10.2.10-h43, >= 10.2.13-h28, >= 10.2.16-h13, >= 10.2.18-h14 >= 12.1.10-h4* >= 11.2.7-h24* >= 10.2.10-h43* | 2026-11-11 | 2026-11-11 |
| 1.1 | CVE-2026-0323
Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability | Checkov by Prisma Cloud 0 | | | 2026-11-11 | 2026-11-11 |
| 1.7 | CVE-2026-0326
PAN-OS: Buffer Overflow Vulnerability in Protocol and Service Processing | Cloud NGFW PAN-OS 12.2 PAN-OS 12.1 PAN-OS 11.2 PAN-OS 11.1 Prisma Access | All* < 12.2.4-h2 < 12.1.10-h4 < 11.2.16-h2 < 11.1.16-h5 None | None* >= 12.2.4-h2 >= 12.1.10-h4 >= 11.2.16-h2 >= 11.1.16-h5 All | 2026-11-11 | 2026-11-11 |
| 5.9 | CVE-2026-0324
GlobalProtect App: Incorrect Privilege Management Vulnerability in OPSWAT MetaDefender Endpoint Security SDK on Windows | MetaDefender Endpoint Security SDK 4.3.0 | | | 2026-11-11 | 2026-11-11 |
| 9.2 | CVE-2026-111497
Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products | PAN-OS 12.2 PAN-OS 12.1 PAN-OS 11.2 PAN-OS 11.1 PAN-OS 10.2 Prisma Cloud - Application Security Transporter Client | < 12.2.4-h1 < 12.1.4-h13, < 12.1.7-h11, < 12.1.10-h3 < 11.2.4-h23, < 11.2.7-h23, < 11.2.10-h17, < 11.2.13-h4, < 11.2.16-h1 None None < 0.2.9 | >= 12.2.4-h1 >= 12.1.4-h13, >= 12.1.7-h11, >= 12.1.10-h3 >= 11.2.4-h23, >= 11.2.7-h23, >= 11.2.10-h17, >= 11.2.13-h4, >= 11.2.16-h1 All All >= 0.2.9 | 2026-10-26 | 2026-11-09 |
| 9.2 | CVE-2026-109618
Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products | Bridgecrew Cloud NGFW Cortex Cloud Cortex XCORE (SaaS) Cortex XDR Agent Cortex XDR Broker VM Cortex XSIAM Cortex XSOAR Cortex Xpanse GlobalProtect App Idira Koi Next Generation Trust Security PAN-OS 12.2 PAN-OS 12.1 PAN-OS 11.2 PAN-OS 11.1 PAN-OS 10.2 Prisma Access Agent Prisma AIRS AI Gateway Prisma Cloud Prisma Access Prisma SD-WAN Controller Prisma SD-WAN ION Prisma SD-WAN On-Prem Controller Strata Cloud Manager Trust Protection Foundation WildFire Appliance WF-500 and WF-500-B WildFire Cloud | None None None None * None None None None None None None None None < 12.2.4-h1 < 12.1.4-h13, < 12.1.7-h11, < 12.1.10-h3 < 11.2.4-h23, < 11.2.7-h23, < 11.2.10-h16, < 11.2.13-h4, < 11.2.16-h1 < 11.1.4-h38, < 11.1.6-h40, < 11.1.7-h12, < 11.1.10-h36, < 11.1.13-h16, < 11.1.16-h4 < 10.2.7-h39, < 10.2.10-h42, < 10.2.13-h27, < 10.2.16-h12, < 10.2.18-h13 None None None None None None None None None None None ** | All All All All * All All All All All All All All All >= 12.2.4-h1 >= 12.1.4-h13, >= 12.1.7-h11, >= 12.1.10-h3 >= 11.2.4-h23, >= 11.2.7-h23, >= 11.2.10-h16, >= 11.2.13-h4, >= 11.2.16-h1 >= 11.1.4-h38, >= 11.1.6-h40, >= 11.1.7-h12, >= 11.1.10-h36, >= 11.1.13-h16, >= 11.1.16-h4 >= 10.2.7-h39, >= 10.2.10-h42, >= 10.2.13-h27, >= 10.2.16-h12, >= 10.2.18-h13 All All All All All All All All All All All ** | 2026-10-21 | 2026-10-29 |
| 8.6 | CVE-2026-0322
PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface | Cloud NGFW PAN-OS 12.2 PAN-OS 12.1 PAN-OS 11.2 PAN-OS 11.1 PAN-OS 10.2 Prisma Access | None < 12.2.4 < 12.1.4-h12, < 12.1.7-h8, < 12.1.10-h2 < 11.2.4-h22, < 11.2.7-h21, < 11.2.10-h15, < 11.2.13-h3, < 11.2.16 < 11.1.4-h37, < 11.1.6-h39, < 11.1.7-h11, < 11.1.10-h35, < 11.1.13-h15, < 11.1.16-h3 < 10.2.7-h38, < 10.2.10-h41, < 10.2.13-h26, < 10.2.16-h11, < 10.2.18-h12 None | All >= 12.2.4 >= 12.1.4-h12, >= 12.1.7-h8, >= 12.1.10-h2 >= 11.2.4-h22, >= 11.2.7-h21, >= 11.2.10-h15, >= 11.2.13-h3, >= 11.2.16 >= 11.1.4-h37, >= 11.1.6-h39, >= 11.1.7-h11, >= 11.1.10-h35, >= 11.1.13-h15, >= 11.1.16-h3 >= 10.2.7-h38, >= 10.2.10-h41, >= 10.2.13-h26, >= 10.2.16-h11, >= 10.2.18-h12 All | 2026-10-14 | 2026-10-15 |
| 4.3 | CVE-2026-0314
GlobalProtect App: Local Denial of Service (DoS) on Windows | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.0 | None on Linux, None on macOS, None on iOS, None on Android, None on Chrome OS < 6.3.3-h16 (6.3.3-1199) on Windows < 6.2.8-h15 (6.2.8-1084) on Windows < 6.0.15 on Windows | All on Linux, All on macOS, All on iOS, All on Android, All on Chrome OS >= 6.3.3-h16 (6.3.3-1199) on Windows >= 6.2.8-h15 (6.2.8-1084) on Windows >= 6.0.15 on Windows | 2026-10-14 | 2026-10-14 |
| 4.9 | CVE-2026-0319
PAN-OS: Improper Input Handling Vulnerability | Cloud NGFW PAN-OS 12.2 PAN-OS 12.1 PAN-OS 11.2 PAN-OS 11.1 PAN-OS 10.2 Prisma Access 12.1 Prisma Access 11.2 Prisma Access 10.2 | None < 12.2.4 < 12.1.4-h12, < 12.1.7-h8, < 12.1.10-h2 < 11.2.4-h22, < 11.2.7-h21, < 11.2.10-h15, < 11.2.13-h3, < 11.2.16 < 11.1.4-h37, < 11.1.6-h39, < 11.1.7-h11, < 11.1.10-h35, < 11.1.13-h15, < 11.1.16-h3 < 10.2.7-h38, < 10.2.10-h41, < 10.2.13-h26, < 10.2.16-h11, < 10.2.18-h12 < 12.1.7-h8 < 11.2.7-h21 < 10.2.10-h41 | All >= 12.2.4 >= 12.1.4-h12, >= 12.1.7-h8, >= 12.1.10-h2 >= 11.2.4-h22, >= 11.2.7-h21, >= 11.2.10-h15, >= 11.2.13-h3, >= 11.2.16 (ETA: 10/15) >= 11.1.4-h37, >= 11.1.6-h39, >= 11.1.7-h11, >= 11.1.10-h35, >= 11.1.13-h15, >= 11.1.16-h3 >= 10.2.7-h38, >= 10.2.10-h41, >= 10.2.13-h26, >= 10.2.16-h11, >= 10.2.18-h12 >= 12.1.7-h8 >= 11.2.7-h21 >= 10.2.10-h41 | 2026-10-14 | 2026-10-14 |
| 7.7 | PAN-SA-2026-0013
Chromium: Monthly Vulnerability Update (October 2026) | | | | 2026-10-14 | 2026-10-14 |
| 6.1 | CVE-2026-0320
PAN-OS: Authenticated Admin Command Injection Vulnerability | Cloud NGFW PAN-OS 12.2 PAN-OS 12.1 PAN-OS 11.2 PAN-OS 11.1 PAN-OS 10.2 Prisma Access | None < 12.2.4 < 12.1.4-h12, < 12.1.7-h8, < 12.1.10-h2 < 11.2.4-h22, < 11.2.7-h21, < 11.2.10-h15, < 11.2.13-h3, < 11.2.16 < 11.1.4-h37, < 11.1.6-h39, < 11.1.7-h11, < 11.1.10-h35, < 11.1.13-h15, < 11.1.16-h3 < 10.2.7-h38, < 10.2.10-h41, < 10.2.13-h26, < 10.2.16-h11, < 10.2.18-h12 None | All >= 12.2.4 >= 12.1.4-h12, >= 12.1.7-h8, >= 12.1.10-h2 >= 11.2.4-h22, >= 11.2.7-h21, >= 11.2.10-h15, >= 11.2.13-h3, >= 11.2.16 >= 11.1.4-h37, >= 11.1.6-h39, >= 11.1.7-h11, >= 11.1.10-h35, >= 11.1.13-h15, >= 11.1.16-h3 >= 10.2.7-h38, >= 10.2.10-h41, >= 10.2.13-h26, >= 10.2.16-h11, >= 10.2.18-h12 All | 2026-10-14 | 2026-10-15 |
| 4.6 | CVE-2026-0318
PAN-OS: Denial of Service (DoS) on Panorama | Cloud NGFW PAN-OS 12.2 PAN-OS 12.1 PAN-OS 11.2 PAN-OS 11.1 Prisma Access | None < 12.2.4 on Panorama < 12.1.4-h12 on Panorama, < 12.1.7-h8 on Panorama, < 12.1.10-h2 on Panorama < 11.2.4-h22 on Panorama, < 11.2.7-h21 on Panorama, < 11.2.10-h15 on Panorama, < 11.2.13-h3 on Panorama, < 11.2.15 on Panorama < 11.1.4-h37 on Panorama, < 11.1.6-h39 on Panorama, < 11.1.7-h11 on Panorama, < 11.1.10-h35 on Panorama, < 11.1.13-h15 on Panorama, < 11.1.16-h3 on Panorama None | All >= 12.2.4 on Panorama >= 12.1.4-h12 on Panorama, >= 12.1.7-h8 on Panorama, >= 12.1.10-h2 on Panorama >= 11.2.4-h22 on Panorama, >= 11.2.7-h21 on Panorama, >= 11.2.10-h15 on Panorama, >= 11.2.13-h3 on Panorama, >= 11.2.15 on Panorama >= 11.1.4-h37 on Panorama, >= 11.1.6-h39 on Panorama, >= 11.1.7-h11 on Panorama, >= 11.1.10-h35 on Panorama, >= 11.1.13-h15 on Panorama, >= 11.1.16-h3 on Panorama All | 2026-10-14 | 2026-10-14 |
| 4.3 | CVE-2026-0312
Checkov by Prisma Cloud: Path Traversal Vulnerabilities | Checkov by Prisma Cloud 0 | | | 2026-10-14 | 2026-10-14 |
| 1.1 | CVE-2026-0316
PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability | Cloud NGFW PAN-OS 12.2 PAN-OS 12.1 PAN-OS 11.2 PAN-OS 11.1 Prisma Access | None < 12.2.4 < 12.1.10-h2 < 11.2.16 < 11.1.16-h3 None | All >= 12.2.4 >= 12.1.10-h2 >= 11.2.16 >= 11.1.16-h3 All | 2026-10-14 | 2026-10-15 |
| 6.1 | CVE-2026-0313
Cortex XSOAR: OS Command Injection Vulnerability | Cortex XSIAM OS Query 0 Cortex XSOAR OS Query 0 | | | 2026-10-14 | 2026-10-14 |
| 5.9 | CVE-2026-0315
GlobalProtect App: Local Privilege Escalation Vulnerability on macOS | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 | None on Linux, None on Windows, None on iOS, None on Android, None on ChromeOS < 6.3.3-h16 (6.3.3-1199) on macOS < 6.2.8-h15 (6.2.8-1084) on macOS | All on Linux, All on Windows, All on iOS, All on Android, All on ChromeOS >= 6.3.3-h16 (6.3.3-1199) on macOS >= 6.2.8-h15 (6.2.8-1084) on macOS | 2026-10-14 | 2026-10-14 |
| 6.6 | CVE-2026-0321
PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services | Cloud NGFW PAN-OS 12.2 PAN-OS 12.1 PAN-OS 11.2 PAN-OS 11.1 PAN-OS 10.2 Prisma Access 12.1 Prisma Access 11.2 Prisma Access 10.2 | None < 12.2.4 < 12.1.4-h12, < 12.1.7-h8, < 12.1.10-h2 < 11.2.4-h22, < 11.2.7-h21, < 11.2.10-h15, < 11.2.13-h3, < 11.2.16 < 11.1.4-h37, < 11.1.6-h39, < 11.1.7-h11, < 11.1.10-h35, < 11.1.13-h15, < 11.1.16-h3 < 10.2.7-h38, < 10.2.10-h41, < 10.2.13-h26, < 10.2.16-h11, < 10.2.18-h12 < 12.1.7-h8* < 11.2.7-h21* < 10.2.10-h41* | All >= 12.2.4 >= 12.1.4-h12, >= 12.1.7-h8, >= 12.1.10-h2 >= 11.2.4-h22, >= 11.2.7-h21, >= 11.2.10-h15, >= 11.2.13-h3, >= 11.2.16 >= 11.1.4-h37, >= 11.1.6-h39, >= 11.1.7-h11, >= 11.1.10-h35, >= 11.1.13-h15, >= 11.1.16-h3 >= 10.2.7-h38, >= 10.2.10-h41, >= 10.2.13-h26, >= 10.2.16-h11, >= 10.2.18-h12 >= 12.1.7-h8* >= 11.2.7-h21* >= 10.2.10-h41* | 2026-10-14 | 2026-10-15 |
| 1.1 | CVE-2026-0311
Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability | Checkov by Prisma Cloud 0 | | | 2026-10-14 | 2026-10-14 |
| 1.2 | CVE-2026-0317
PAN-OS: Denial of Service Vulnerability | Cloud NGFW PAN-OS 12.2 PAN-OS 12.1 PAN-OS 11.2 PAN-OS 11.1 Prisma Access | None < 12.2.4 < 12.1.10-h2 < 11.2.16 < 11.1.16-h3 None | All >= 12.2.4 >= 12.1.10-h2 >= 11.2.16 >= 11.1.16-h3 All | 2026-10-14 | 2026-10-15 |