CVE-2026-0327: PAN-OS: Privilege Escalation Vulnerability in GlobalProtect
CVE-2026-0327
Summary
An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated remote attacker with network access to obtain sensitive firewall and session information by sending traffic to or through a dataplane interface.
Panorama is not affected by this vulnerability.
Products covered
Cloud NGFW
PAN-OS
Prisma Access
PAN-OS 12.2
PAN-OS 12.1
PAN-OS 11.2
PAN-OS 11.1
PAN-OS 10.2
Show 3 more products
Prisma Access 12.1
Prisma Access 11.2
Prisma Access 10.2
Remediation
Version | Minor Version | Suggested Solution |
|---|---|---|
Cloud NGFW | Customers who prefer to upgrade can work with Palo Alto Networks support to schedule an on-demand software upgrade. | |
PAN-OS 12.2 | 12.2.0 through 12.2.4-h* | Upgrade to 12.2.4-h2 or later. |
PAN-OS 12.1 | 12.1.8 through 12.1.10-h* | Upgrade to 12.1.10-h4 or later. |
12.1.5 through 12.1.7-h* | Upgrade to 12.1.7-h12 or later. | |
12.1.2 through 12.1.4-h* | Upgrade to 12.1.4-h14 or later. | |
PAN-OS 11.2 | 11.2.15 through 11.2.16-h* | Upgrade to 11.2.16-h2 or later. |
11.2.11 through 11.2.13-h* | Upgrade to 11.2.13-h5 or 11.2.16-h2 or later. | |
11.2.8 through 11.2.10-h* | Upgrade to 11.2.10-h18 or 11.2.16-h2 or later. | |
11.2.5 through 11.2.7-h* | Upgrade to 11.2.7-h24 or 11.2.16-h2 or later. | |
11.2.0 through 11.2.4-h* | Upgrade to 11.2.4-h24 or 11.2.16-h2 or later. | |
PAN-OS 11.1 | 11.1.14 through 11.1.16-h* | Upgrade to 11.1.16-h5 or later. |
11.1.11 through 11.1.13-h* | Upgrade to 11.1.13-h17 or 11.1.16-h5 or later. | |
11.1.8 through 11.1.10-h* | Upgrade to 11.1.10-h37 or 11.1.16-h5 or later. | |
11.1.7 through 11.1.7-h* | Upgrade to 11.1.7-h13 or 11.1.16-h5 or later. | |
11.1.5 through 11.1.6-h* | Upgrade to 11.1.6-h41 or 11.1.16-h5 or later. | |
11.1.0 through 11.1.4-h* | Upgrade to 11.1.4-h39 or 11.1.16-h5 or later. | |
PAN-OS 10.2 | 10.2.17 through 10.2.18-h* | Upgrade to 10.2.18-h14 or later. |
10.2.14 through 10.2.16-h* | Upgrade to 10.2.16-h13 or 10.2.18-h14 or later. | |
10.2.11 through 10.2.13-h* | Upgrade to 10.2.13-h28 or 10.2.18-h14 or later. | |
10.2.8 through 10.2.10-h* | Upgrade to 10.2.10-h43 or 10.2.18-h14 or later. | |
10.2.0 through 10.2.7-h* | Upgrade to 10.2.7-h40 or 10.2.18-h14 or later. | |
All older unsupported PAN-OS versions | Upgrade to a supported fixed version. | |
Prisma Access 12.1 | 12.1.2 through 12.1.10-h* | Upgrade to 12.1.10-h4 or later. |
Prisma Access 11.2 | 11.2.0 through 11.2.7-h* | Upgrade to 11.2.7-h24 or later. |
Prisma Access 10.2 | 10.2.0 through 10.2.10-h* | Upgrade to 10.2.10-h43 or later. |
* See the note under Product Status for information regarding Prisma Access upgrades.
Vendor-listed fixes
Cloud NGFW None*
PAN-OS 12.2 >= 12.2.4-h2
PAN-OS 12.1 >= 12.1.4-h14, >= 12.1.7-h12, >= 12.1.10-h4
PAN-OS 11.2 >= 11.2.4-h24, >= 11.2.7-h24, >= 11.2.10-h18, >= 11.2.13-h5, >= 11.2.16-h2
PAN-OS 11.1 >= 11.1.4-h39, >= 11.1.6-h41, >= 11.1.7-h13, >= 11.1.10-h37, >= 11.1.13-h17, >= 11.1.16-h5
PAN-OS 10.2 >= 10.2.7-h40, >= 10.2.10-h43, >= 10.2.13-h28, >= 10.2.16-h13, >= 10.2.18-h14
Prisma Access 12.1 >= 12.1.10-h4*
Prisma Access 11.2 >= 11.2.7-h24*
Show 1 more fixes
Prisma Access 10.2 >= 10.2.10-h43*
CVEs in this advisory 1
Updates
- Published by Palo Alto Networks
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.