CVE-2026-0331

UNKNOWN 0.0

PAN-OS: Sensitive Information Disclosure Vulnerability

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated remote attacker with network access to obtain sensitive firewall and session information by sending traffic to or through a dataplane interface. Panorama is not affected by this vulnerability.

CWE	CWE-200
Vendor	palo alto networks
Product	cloud ngfw
Published	Nov 11, 2026

Stay Ahead of the Next One

Get instant alerts for palo alto networks cloud ngfw

Be the first to know when new unknown vulnerabilities affecting palo alto networks cloud ngfw are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Palo Alto Networks / Cloud NGFW

All

Palo Alto Networks / PAN-OS

12.2.0 < 12.2.4-h2 12.1.0 < 12.1.10-h4 11.2.0 < 11.2.16-h2 11.1.0 < 11.1.16-h5 10.2.0 < 10.2.18-h14

Palo Alto Networks / Prisma Access

12.1.0 < 12.1.10-h4 11.2.0 < 11.2.7-h24 10.2.0 < 10.2.10-h43

References

NVD ↗ CVE.org ↗ EPSS Data ↗

security.paloaltonetworks.com: https://security.paloaltonetworks.com/CVE-2026-0331

Credits

OpenAI Rotem Bar (internal reporter)