CVE-2026-0331: PAN-OS: Sensitive Information Disclosure Vulnerability
CVE-2026-0331
Summary
An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated attacker with valid GlobalProtect credentials to bypass IP address restrictions and circumvent network access controls that rely on source IP filtering.
Cloud NGFW is not affected by this vulnerability.
Products covered
Cloud NGFW
PAN-OS
Prisma Access
PAN-OS 12.2
PAN-OS 12.1
PAN-OS 11.2
PAN-OS 11.1
Prisma Access 12.1
Show 1 more products
Prisma Access 11.2
Remediation
Version | Minor Version | Suggested Solution |
|---|---|---|
Cloud NGFW | No action needed. | |
PAN-OS 12.2 | 12.2.0 through 12.2.4-h* | Upgrade to 12.2.4-h2 or later. |
PAN-OS 12.1 | 12.1.2 through 12.1.10-h* | Upgrade to 12.1.10-h4 or later. |
PAN-OS 11.2 | 11.2.0 through 11.2.16-h* | Upgrade to 11.2.16-h2 or later. |
PAN-OS 11.1 | 11.1.0 through 11.1.16-h* | Upgrade to 11.1.16-h5 or later. |
All older unsupported PAN-OS versions | Upgrade to a supported fixed version. | |
Prisma Access 12.1 | 12.1.2 through 12.1.10-4* | Upgrade to 12.1.10-h4 or later. |
Prisma Access 11.2 | Upgrade to 12.1.10-h4 or later. |
* See the note under Product Status for information regarding Prisma Access upgrades.
Vendor-listed fixes
Cloud NGFW All
PAN-OS 12.2 >= 12.2.4-h2
PAN-OS 12.1 >= 12.1.10-h4
PAN-OS 11.2 >= 11.2.16-h2
PAN-OS 11.1 >= 11.1.16-h5
Prisma Access 12.1 >= 12.1.10-h4*
Prisma Access 11.2 None*
CVEs in this advisory 1
Updates
- Published by Palo Alto Networks
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.