Ce mail provient de l'extérieur, restons vigilants ===================================================================== CERT-Renater Note d'Information No. 2026/VULN1026 _____________________________________________________________________ DATE : 15/10/2026 HARDWARE PLATFORM(S): / OPERATING SYSTEM(S): PAN-OS. ==================================================================== https://security.paloaltonetworks.com/CVE-2026-0322 https://security.paloaltonetworks.com/CVE-2026-0320 https://security.paloaltonetworks.com/CVE-2026-0321 _____________________________________________________________________ CVE-2026-0322 PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface Urgency HIGHEST Severity 8.6 · HIGH Exploit Maturity ATTACKED Response Effort MODERATE Recovery USER Value Density DIFFUSE Attack Vector NETWORK Attack Complexity LOW Attack Requirements NONE Automatable NO User Interaction NONE Product Confidentiality HIGH Product Integrity HIGH Product Availability HIGH Privileges Required HIGH Subsequent Confidentiality NONE Subsequent Integrity NONE Subsequent Availability NONE Published 2026-10-14 Updated 2026-10-14 Discovered internally Description A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines. This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma® Access are not impacted by this vulnerability. Product Status Versions Affected Unaffected Cloud NGFW None All PAN-OS 12.2 < 12.2.4 >= 12.2.4 PAN-OS 12.1 < 12.1.4-h12 < 12.1.7-h8 < 12.1.10-h2 >= 12.1.4-h12 >= 12.1.7-h8 >= 12.1.10-h2 PAN-OS 11.2 < 11.2.4-h22 < 11.2.7-h21 < 11.2.10-h15 < 11.2.13-h3 < 11.2.16 >= 11.2.4-h22 >= 11.2.7-h21 >= 11.2.10-h15 >= 11.2.13-h3 >= 11.2.16 (ETA: 10/15) PAN-OS 11.1 < 11.1.4-h37 < 11.1.6-h39 < 11.1.7-h11 < 11.1.10-h35 < 11.1.13-h15 < 11.1.16-h3 >= 11.1.4-h37 >= 11.1.6-h39 >= 11.1.7-h11 >= 11.1.10-h35 >= 11.1.13-h15 >= 11.1.16-h3 PAN-OS 10.2 < 10.2.7-h38 < 10.2.10-h41 < 10.2.13-h26 < 10.2.16-h11 < 10.2.18-h12 >= 10.2.7-h38 >= 10.2.10-h41 >= 10.2.13-h26 >= 10.2.16-h11 >= 10.2.18-h12 Prisma Access None All Required Configuration for Exposure No special configuration is required to be affected by this issue. Severity: HIGH, Suggested Urgency: HIGHEST The risk is highest when you allow access to the management interface from external IP addresses on the internet. Our recommendation is to remediate as soon as possible. HIGH - CVSS-BT: 8.6 /CVSS-B: 8.6 (CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:N/R:U/V:D/RE:M/U:Red) You can reduce the risk of exploitation by restricting access to a jump box that is the only system allowed to access the management interface. HIGH - CVSS-BT: 8.5 /CVSS-B: 8.5 (CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:N/R:U/V:D/RE:M/U:Red) Exploitation Status Very limited exploitation has been observed targeting the Palo Alto Networks management interface. Weakness Type and Impact CWE-94 Improper Control of Generation of Code ('Code Injection') CAPEC-242 Code Injection Solution Version Minor Version Suggested Solution Cloud NGFW No action needed. PAN-OS 12.2 12.2.0 through 12.2.3 Upgrade to 12.2.4 or later. PAN-OS 12.1 12.1.8 through 12.1.10-h* Upgrade to 12.1.10-h2 or later. 12.1.5 through 12.1.7-h* Upgrade to 12.1.7-h8 or 12.1.10-h2 or later. 12.1.2 through 12.1.4-h* Upgrade to 12.1.4-h12 or 12.1.10-h2 or later. PAN-OS 11.2 11.2.14 through 11.2.15 Upgrade to 11.2.16 or later. 11.2.11 through 11.2.13-h* Upgrade to 11.2.13-h3 or 11.2.16 or later. 11.2.8 through 11.2.10-h* Upgrade to 11.2.10-h15 or 11.2.16 or later. 11.2.5 through 11.2.7-h* Upgrade to 11.2.7-h21 or 11.2.16 or later. 11.2.0 through 11.2.4-h* Upgrade to 11.2.4-h22 or 11.2.16 or later. PAN-OS 11.1 11.1.14 through 11.1.16-h* Upgrade to 11.1.16-h3 or later. 11.1.11 through 11.1.13-h* Upgrade to 11.1.13-h15 or 11.1.16-h3 or later. 11.1.8 through 11.1.10-h* Upgrade to 11.1.10-h35 or 11.1.16-h3 or later. 11.1.7 through 11.1.7-h* Upgrade to 11.1.7-h11 or 11.1.16-h3 or later. 11.1.5 through 11.1.6-h* Upgrade to 11.1.6-h39 or 11.1.16-h3 or later. 11.1.0 through 11.1.4-h* Upgrade to 11.1.4-h37 or 11.1.16-h3 or later. PAN-OS 10.2 10.2.17 through 10.2.18-h* Upgrade to 10.2.18-h12 or later. 10.2.14 through 10.2.16-h* Upgrade to 10.2.16-h11 or 10.2.18-h12 or later. 10.2.11 through 10.2.13-h* Upgrade to 10.2.13-h26 or 10.2.18-h12 or later. 10.2.8 through 10.2.10-h* Upgrade to 10.2.10-h41 or 10.2.18-h12 or later. 10.2.0 through 10.2.7-h* Upgrade to 10.2.7-h38 or 10.2.18-h12 or later. All older unsupported PAN-OS versions Upgrade to a supported fixed version. Prisma Access No action needed. Workarounds and Mitigations No known workarounds exist for this issue. Customers with a Threat Prevention subscription are provided with limited coverage against this vulnerability by enabling Threat ID 510046 and 510047 (from Applications and Threats content version 9159-10287 and later). For these Threat IDs to protect against attacks for this vulnerability: Route incoming traffic for the MGT port through a DP port, e.g., enabling management profile on a DP interface for management access. Replace the Certificate for Inbound Traffic Management. Decrypt inbound traffic to the management interface so the firewall can inspect it. Enable threat prevention on the inbound traffic to management services. Please note that this Threat ID requires SSL Decryption. Acknowledgments Palo Alto Networks thanks Suraj Siddharudh (internal reporter) for discovering and reporting this issue. _____________________________________________________________________ CVE-2026-0320 PAN-OS: Authenticated Admin Command Injection Vulnerability Urgency MODERATE Severity 6.1 · MEDIUM Exploit Maturity UNREPORTED Response Effort MODERATE Recovery USER Value Density DIFFUSE Attack Vector NETWORK Attack Complexity LOW Attack Requirements NONE Automatable NO User Interaction NONE Product Confidentiality HIGH Product Integrity HIGH Product Availability HIGH Privileges Required HIGH Subsequent Confidentiality NONE Subsequent Integrity NONE Subsequent Availability NONE Published 2026-10-14 Updated 2026-10-14 Discovered internally Description A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS management interface. The security risk posed by this issue is significantly minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines. This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma® Access are not affected by this vulnerability. Product Status Versions Affected Unaffected Cloud NGFW None All PAN-OS 12.2 < 12.2.4 >= 12.2.4 PAN-OS 12.1 < 12.1.4-h12 < 12.1.7-h8 < 12.1.10-h2 >= 12.1.4-h12 >= 12.1.7-h8 >= 12.1.10-h2 PAN-OS 11.2 < 11.2.4-h22 < 11.2.7-h21 < 11.2.10-h15 < 11.2.13-h3 < 11.2.16 >= 11.2.4-h22 >= 11.2.7-h21 >= 11.2.10-h15 >= 11.2.13-h3 >= 11.2.16 (ETA: 10/15) PAN-OS 11.1 < 11.1.4-h37 < 11.1.6-h39 < 11.1.7-h11 < 11.1.10-h35 < 11.1.13-h15 < 11.1.16-h3 >= 11.1.4-h37 >= 11.1.6-h39 >= 11.1.7-h11 >= 11.1.10-h35 >= 11.1.13-h15 >= 11.1.16-h3 PAN-OS 10.2 < 10.2.7-h38 < 10.2.10-h41 < 10.2.13-h26 < 10.2.16-h11 < 10.2.18-h12 >= 10.2.7-h38 >= 10.2.10-h41 >= 10.2.13-h26 >= 10.2.16-h11 >= 10.2.18-h12 Prisma Access None All Required Configuration for Exposure No special configuration is required to be affected by this issue. Severity: MEDIUM, Suggested Urgency: MODERATE The risk is highest when you allow access to the management interface from external IP addresses on the internet. Our recommendation is to remediate as soon as possible. MEDIUM - CVSS-BT: 6.1 /CVSS-B: 8.6 (CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber) You can reduce the risk of exploitation by restricting access to a jump box that is the only system allowe d to access the management interface. This will ensure that attacks can succeed only if they obtain privileged access through those specified IP addresses. MEDIUM - CVSS-BT: 5.7 /CVSS-B: 8.4 (CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber) Exploitation Status Palo Alto Networks is not aware of any malicious exploitation of this issue. Weakness Type and Impact CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CAPEC-248 Command Injection Solution Version Minor Version Suggested Solution Cloud NGFW No action needed. PAN-OS 12.2 12.2.0 through 12.2.3 Upgrade to 12.2.4 or later. PAN-OS 12.1 12.1.8 through 12.1.10-h* Upgrade to 12.1.10-h2 or later. 12.1.5 through 12.1.7-h* Upgrade to 12.1.7-h8 or 12.1.10-h2 or later. 12.1.2 through 12.1.4-h* Upgrade to 12.1.4-h12 or 12.1.10-h2 or later. PAN-OS 11.2 11.2.14 through 11.2.15 Upgrade to 11.2.16 or later. 11.2.11 through 11.2.13-h* Upgrade to 11.2.13-h3 or 11.2.16 or later. 11.2.8 through 11.2.10-h* Upgrade to 11.2.10-h15 or 11.2.16 or later. 11.2.5 through 11.2.7-h* Upgrade to 11.2.7-h21 or 11.2.16 or later. 11.2.0 through 11.2.4-h* Upgrade to 11.2.4-h22 or 11.2.16 or later. PAN-OS 11.1 11.1.14 through 11.1.16-h* Upgrade to 11.1.16-h3 or later. 11.1.11 through 11.1.13-h* Upgrade to 11.1.13-h15 or 11.1.16-h3 or later. 11.1.8 through 11.1.10-h* Upgrade to 11.1.10-h35 or 11.1.16-h3 or later. 11.1.7 through 11.1.7-h* Upgrade to 11.1.7-h11 or 11.1.16-h3 or later. 11.1.5 through 11.1.6-h* Upgrade to 11.1.6-h39 or 11.1.16-h3 or later. 11.1.0 through 11.1.4-h* Upgrade to 11.1.4-h37 or 11.1.16-h3 or later. PAN-OS 10.2 10.2.17 through 10.2.18-h* Upgrade to 10.2.18-h12 or later. 10.2.14 through 10.2.16-h* Upgrade to 10.2.16-h11 or 10.2.18-h12 or later. 10.2.11 through 10.2.13-h* Upgrade to 10.2.13-h26 or 10.2.18-h12 or later. 10.2.8 through 10.2.10-h* Upgrade to 10.2.10-h41 or 10.2.18-h12 or later. 10.2.0 through 10.2.7-h* Upgrade to 10.2.7-h38 or 10.2.18-h12 or later. All older unsupported PAN-OS versions Upgrade to a supported fixed version. Prisma Access No action needed. Workarounds and Mitigations No known workarounds exist for this issue. Customers with a Threat Prevention subscription are provided with limited coverage against this vulnerability by enabling Threat ID 510044 and 510049 (from Applications and Threats content version 9159-10287 and later). Please note that this Threat ID requires SSL Decryption. Acknowledgments Palo Alto Networks thanks Daniel Voce (internal reporter) for discovering and reporting this issue. CPEs cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:*:* Show More CPE Applicability cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)12.2.0 and up to (excluding)12.2.4 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)12.1.10 and up to (excluding)12.1.10-h2 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)12.1.7 and up to (excluding)12.1.7-h8 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)12.1.4 and up to (excluding)12.1.4-h12 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)11.2.0 and up to (excluding)11.2.16 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)11.2.13 and up to (excluding)11.2.13-h3 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)11.2.10 and up to (excluding)11.2.10-h15 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)11.2.7 and up to (excluding)11.2.7-h21 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)11.2.4 and up to (excluding)11.2.4-h22 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)11.1.16 and up to (excluding)11.1.16-h3 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)11.1.13 and up to (excluding)11.1.13-h15 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)11.1.10 and up to (excluding)11.1.10-h35 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)11.1.7 and up to (excluding)11.1.7-h11 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)11.1.6 and up to (excluding)11.1.6-h39 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)11.1.4 and up to (excluding)11.1.4-h37 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)10.2.18 and up to (excluding)10.2.18-h12 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)10.2.16 and up to (excluding)10.2.16-h11 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)10.2.13 and up to (excluding)10.2.13-h26 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)10.2.10 and up to (excluding)10.2.10-h41 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)10.2.7 and up to (excluding)10.2.7-h38 Timeline 2026-10-14 Initial Publication. _____________________________________________________________________ CVE-2026-0321 PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services Urgency MODERATE Severity 6.6 · MEDIUM Exploit Maturity UNREPORTED Response Effort MODERATE Recovery USER Value Density DIFFUSE Attack Vector NETWORK Attack Complexity LOW Attack Requirements NONE Automatable NO User Interaction NONE Product Confidentiality NONE Product Integrity NONE Product Availability HIGH Privileges Required NONE Subsequent Confidentiality NONE Subsequent Integrity NONE Subsequent Availability NONE Published 2026-10-14 Updated 2026-10-14 Discovered internally Description Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Repeated attempts to trigger this condition result in the firewall entering maintenance mode. Cloud NGFW and Panorama are not affected by this vulnerability. Product Status Versions Affected Unaffected Cloud NGFW None All PAN-OS 12.2 < 12.2.4 >= 12.2.4 PAN-OS 12.1 < 12.1.4-h12 < 12.1.7-h8 < 12.1.10-h2 >= 12.1.4-h12 >= 12.1.7-h8 >= 12.1.10-h2 PAN-OS 11.2 < 11.2.4-h22 < 11.2.7-h21 < 11.2.10-h15 < 11.2.13-h3 < 11.2.16 >= 11.2.4-h22 >= 11.2.7-h21 >= 11.2.10-h15 >= 11.2.13-h3 >= 11.2.16 (ETA: 10/15) PAN-OS 11.1 < 11.1.4-h37 < 11.1.6-h39 < 11.1.7-h11 < 11.1.10-h35 < 11.1.13-h15 < 11.1.16-h3 >= 11.1.4-h37 >= 11.1.6-h39 >= 11.1.7-h11 >= 11.1.10-h35 >= 11.1.13-h15 >= 11.1.16-h3 PAN-OS 10.2 < 10.2.7-h38 < 10.2.10-h41 < 10.2.13-h26 < 10.2.16-h11 < 10.2.18-h12 >= 10.2.7-h38 >= 10.2.10-h41 >= 10.2.13-h26 >= 10.2.16-h11 >= 10.2.18-h12 Prisma Access 12.1 < 12.1.7-h8* >= 12.1.7-h8* Prisma Access 11.2 < 11.2.7-h21* >= 11.2.7-h21* Prisma Access 10.2 < 10.2.10-h41* >= 10.2.10-h41* * Palo Alto Networks Prisma Access will upgrade all customers during the next scheduled maintenance cycle. Customers who require an upgrade prior to this cycle should contact Palo Alto Networks Support or their account teams to schedule an on-demand software upgrade window. Required Configuration for Exposure No special configuration is required to be affected by this issue. Severity: MEDIUM, Suggested Urgency: MODERATE CVSS-BT: 6.6 / CVSS-B: 8.7 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber) Exploitation Status Palo Alto Networks is not aware of any malicious exploitation of this issue. Weakness Type and Impact CWE-754 Improper Check for Unusual or Exceptional Conditions CAPEC-153 Input Data Manipulation Solution Version Minor Version Suggested Solution Cloud NGFW No action needed. PAN-OS 12.2 12.2.0 through 12.2.3 Upgrade to 12.2.4 or later. PAN-OS 12.1 12.1.8 through 12.1.10-h* Upgrade to 12.1.10-h2 or later. 12.1.5 through 12.1.7-h* Upgrade to 12.1.7-h8 or 12.1.10-h2 or later. 12.1.2 through 12.1.4-h* Upgrade to 12.1.4-h12 or 12.1.10-h2 or later. PAN-OS 11.2 11.2.14 through 11.2.15-h* Upgrade to 11.2.16 or later. 11.2.11 through 11.2.13-h* Upgrade to 11.2.13-h3 or 11.2.16 or later. 11.2.8 through 11.2.10-h* Upgrade to 11.2.10-h15 or 11.2.16 or later. 11.2.5 through 11.2.7-h* Upgrade to 11.2.7-h21 or 11.2.16 or later. 11.2.0 through 11.2.4-h* Upgrade to 11.2.4-h22 or 11.2.16 or later. PAN-OS 11.1 11.1.14 through 11.1.16-h* Upgrade to 11.1.16-h3 or later. 11.1.11 through 11.1.13-h* Upgrade to 11.1.13-h15 or 11.1.16-h3 or later. 11.1.8 through 11.1.10-h* Upgrade to 11.1.10-h35 or 11.1.16-h3 or later. 11.1.7 through 11.1.7-h* Upgrade to 11.1.7-h11 or 11.1.16-h3 or later. 11.1.5 through 11.1.6-h* Upgrade to 11.1.6-h39 or 11.1.16-h3 or later. 11.1.0 through 11.1.4-h* Upgrade to 11.1.4-h37 or 11.1.16-h3 or later. PAN-OS 10.2 10.2.17 through 10.2.18-h* Upgrade to 10.2.18-h12 or later. 10.2.14 through 10.2.16-h* Upgrade to 10.2.16-h11 or 10.2.18-h12 or later. 10.2.11 through 10.2.13-h* Upgrade to 10.2.13-h26 or 10.2.18-h12 or later. 10.2.8 through 10.2.10-h* Upgrade to 10.2.10-h41 or 10.2.18-h12 or later. 10.2.0 through 10.2.7-h* Upgrade to 10.2.7-h38 or 10.2.18-h12 or later. All older unsupported PAN-OS versions Upgrade to a supported fixed version. Prisma Access 12.1 12.1.0 through 12.1.* Upgrade to 12.1.7-h8 or later. Prisma Access 11.2 11.2.0 through 11.2.* Upgrade to 11.2.7-h21 or later. Prisma Access 10.2 10.2.0 through 10.2.* Upgrade to 10.2.10-h41 or later. * See the note under Product Status for information regarding Prisma Access upgrades. Workarounds and Mitigations No known workarounds exist for this issue. Customers with a Threat Prevention subscription are provided with limited coverage against this vulnerability by enabling Threat ID 510038 (from Applications and Threats content version 9158-10284 and later). Please note that this Threat ID requires SSL Decryption. Acknowledgments Palo Alto Networks thanks Ben Nott (internal reporter) for discovering and reporting this issue. CPEs cpe:2.3:o:palo_alto_networks:pan-os:12.2.3:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:12.2.2:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:-:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h6:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h5:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h3:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h2:*:*:*:*:*:* cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:h1:*:*:*:*:*:* Show More CPE Applicability cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)12.2.0 and up to (excluding)12.2.4 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)12.1.10 and up to (excluding)12.1.10-h2 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)12.1.7 and up to (excluding)12.1.7-h8 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)12.1.4 and up to (excluding)12.1.4-h12 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)11.2.0 and up to (excluding)11.2.16 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)11.2.13 and up to (excluding)11.2.13-h3 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)11.2.10 and up to (excluding)11.2.10-h15 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)11.2.7 and up to (excluding)11.2.7-h21 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)11.2.4 and up to (excluding)11.2.4-h22 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)11.1.16 and up to (excluding)11.1.16-h3 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)11.1.13 and up to (excluding)11.1.13-h15 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)11.1.10 and up to (excluding)11.1.10-h35 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)11.1.7 and up to (excluding)11.1.7-h11 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)11.1.6 and up to (excluding)11.1.6-h39 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)11.1.4 and up to (excluding)11.1.4-h37 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)10.2.18 and up to (excluding)10.2.18-h12 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)10.2.16 and up to (excluding)10.2.16-h11 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)10.2.13 and up to (excluding)10.2.13-h26 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)10.2.10 and up to (excluding)10.2.10-h41 ORcpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:* is vulnerable from (including)10.2.7 and up to (excluding)10.2.7-h38 or cpe:2.3:o:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:* is vulnerable from (including)12.1.7 and up to (excluding)12.1.7-h8 ORcpe:2.3:o:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:* is vulnerable from (including)11.2.7 and up to (excluding)11.2.7-h21 ORcpe:2.3:o:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:* is vulnerable from (including)10.2.10 and up to (excluding)10.2.10-h41 Timeline 2026-10-14 Initial Publication ========================================================= + CERT-RENATER | tel : 01-53-94-20-44 + + 23/25 Rue Daviel | fax : 01-53-94-20-41 + + 75013 Paris | email:cert@support.renater.fr + =========================================================