CVE-2026-0331: PAN-OS: Sensitive Information Disclosure Vulnerability
CVE-2026-0331
Summary
A privilege escalation vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated, lower-privileged user to obtain the privileges and configuration of a higher-privileged user.
Cloud NGFW and Panorama are not affected by this vulnerability.
Products covered
Cloud NGFW
PAN-OS
Prisma Access
PAN-OS 12.2
PAN-OS 12.1
PAN-OS 11.2
PAN-OS 11.1
Prisma Access 12.1
Show 1 more products
Prisma Access 11.2
Remediation
Version | Minor Version | Suggested Solution |
|---|---|---|
Cloud NGFW | No action needed. | |
PAN-OS 12.2 | 12.2.0 through 12.2.4-h* | Upgrade to 12.2.4-h2 or later. |
PAN-OS 12.1 | 12.1.2 through 12.1.10-h* | Upgrade to 12.1.10-h4 or later. |
PAN-OS 11.2 | 11.2.0 through 11.2.16-h* | Upgrade to 11.2.16-h2 or later. |
PAN-OS 11.1 | 11.1.0 through 11.1.16-h* | Upgrade to 11.1.16-h5 or later. |
All older unsupported PAN-OS versions | Upgrade to a supported fixed version. | |
Prisma Access 12.1 | 12.1.2 through 12.1.10-h* | Upgrade to 12.1.10-h4 or later. |
Prisma Access 11.2 | Upgrade to 12.1.10-h4 or later. |
* See the note under Product Status for information regarding Prisma Access upgrades.
Vendor-listed fixes
Cloud NGFW All
PAN-OS 12.2 >= 12.2.4-h2
PAN-OS 12.1 >= 12.1.10-h4
PAN-OS 11.2 >= 11.2.16-h2
PAN-OS 11.1 >= 11.1.16-h5
Prisma Access 12.1 >= 12.1.10-h4*
Prisma Access 11.2 None*
CVEs in this advisory 1
Updates
- Published by Palo Alto Networks
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.