Skip to content
CVE PROGRAM SOURCE RECORD1.7 Low

CVE-2026-0301

PAN-OS: Information Disclosure Vulnerability in URL Filtering

Description

An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network access to obtain sensitive information. Panorama is not impacted by this vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks Cloud NGFW

Default version status: unknown

  • Allaffected

Palo Alto Networks PAN-OS

Default version status: unaffected

  • 12.1.0unaffected
  • 11.2.0unaffected
  • 11.1.0 to < 11.1.16-h1affected
  • 10.2.0 to < 10.2.8affected

Palo Alto Networks Prisma Access

Default version status: unknown

  • 12.1.0unaffected
  • 11.2.0unaffected
  • 10.2.0 to < 10.2.10affected

References