--- id: CVE-2026-0331 title: 'PAN-OS: Sensitive Information Disclosure Vulnerability' summary: >- An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated remote attacker with network access to obtain sensitive firewall and session information by sending traffic to or through a datapl… severity: medium cvss: 6.6 cvssVector: >- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber cvssSource: cna cwe: - CWE-200 vendor: Palo Alto Networks product: Cloud NGFW affected: - cloud_ngfw All - PAN-OS >= 12.2.0 < 12.2.4-h2 - PAN-OS >= 12.1.0 < 12.1.10-h4 - PAN-OS >= 11.2.0 < 11.2.16-h2 - PAN-OS >= 11.1.0 < 11.1.16-h5 - PAN-OS >= 10.2.0 < 10.2.18-h14 - prisma_access >= 12.1.0 < 12.1.10-h4 - prisma_access >= 11.2.0 < 11.2.7-h24 - prisma_access >= 10.2.0 < 10.2.10-h43 published: '2026-11-11' updated: '2026-11-11' sourceUpdated: '2026-11-11T19:35:31.346Z' source: CVEORG sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-0331' references: - url: 'https://security.paloaltonetworks.com/CVE-2026-0331' tags: - cve.org ingestedAt: '2026-11-11T20:20:43.503Z' epss: 0.00565 epssPercentile: 0.47431 --- ## Overview An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated remote attacker with network access to obtain sensitive firewall and session information by sending traffic to or through a dataplane interface. Panorama is not affected by this vulnerability. ## Affected - `cloud_ngfw All` - `PAN-OS >= 12.2.0 < 12.2.4-h2` - `PAN-OS >= 12.1.0 < 12.1.10-h4` - `PAN-OS >= 11.2.0 < 11.2.16-h2` - `PAN-OS >= 11.1.0 < 11.1.16-h5` - `PAN-OS >= 10.2.0 < 10.2.18-h14` - `prisma_access >= 12.1.0 < 12.1.10-h4` - `prisma_access >= 11.2.0 < 11.2.7-h24` - `prisma_access >= 10.2.0 < 10.2.10-h43` ## Remediation VERSION MINOR VERSION SUGGESTED SOLUTION Cloud NGFW Customers who prefer to upgrade can work with Palo Alto Networks support to schedule an on-demand software upgrade. PAN-OS 12.2 12.2.0 through 12.2.4-h* Upgrade to 12.2.4-h2 or later. PAN-OS 12.1 12.1.8 through 12.1.10-h* Upgrade to 12.1.10-h4 or later. 12.1.5 through 12.1.7-h* Upgrade to 12.1.7-h12 or later. 12.1.2 through 12.1.4-h* Upgrade to 12.1.4-h14 or later. PAN-OS 11.2 11.2.15 through 11.2.16-h* Upgrade to 11.2.16-h2 or later. 11.2.11 through 11.2.13-h* Upgrade to 11.2.13-h5 or 11.2.16-h2 or later. 11.2.8 through 11.2.10-h* Upgrade to 11.2.10-h18 or 11.2.16-h2 or later. 11.2.5 through 11.2.7-h* Upgrade to 11.2.7-h24 or 11.2.16-h2 or later. 11.2.0 through 11.2.4-h* Upgrade to 11.2.4-h24 or 11.2.16-h2 or later. PAN-OS 11.1 11.1.14 through 11.1.16-h* Upgrade to 11.1.16-h5 or later. 11.1.11 through 11.1.13-h* Upgrade to 11.1.13-h17 or 11.1.16-h5 or later. 11.1.8 through 11.1.10-h* Upgrade to 11.1.10-h37 or 11.1.16-h5 or later. 11.1.7 through 11.1.7-h* Upgrade to 11.1.7-h13 or 11.1.16-h5 or later. 11.1.5 through 11.1.6-h* Upgrade to 11.1.6-h41 or 11.1.16-h5 or later. 11.1.0 through 11.1.4-h* Upgrade to 11.1.4-h39 or 11.1.16-h5 or later. PAN-OS 10.2 10.2.17 through 10.2.18-h* Upgrade to 10.2.18-h14 or later. 10.2.14 through 10.2.16-h* Upgrade to 10.2.16-h13 or 10.2.18-h14 or later. 10.2.11 through 10.2.13-h* Upgrade to 10.2.13-h28 or 10.2.18-h14 or later. 10.2.8 through 10.2.10-h* Upgrade to 10.2.10-h43 or 10.2.18-h14 or later. 10.2.0 through 10.2.7-h* Upgrade to 10.2.7-h40 or 10.2.18-h14 or later. All older Upgrade to a supported fixed version. unsupported PAN-OS versions Prisma Access 12.1 12.1.2 through 12.1.10-h* Upgrade to 12.1.10-h4 or later. Prisma Access 11.2 11.2.0 through 11.2.7-h* Upgrade to 11.2.7-h24 or later. Prisma Access 10.2 10.2.0 through 10.2.10-h* Upgrade to 10.2.10-h43 or later. * See the note under Product Status for information regarding Prisma Access upgrades. ### Workarounds No known workarounds exist for this issue.