Skip to content
Heist/ feed
Low

PAN-OS: Information Disclosure Vulnerability in URL Filtering

Type: advisorySource: Official CVE List1 source record

An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network access to obtain sensitive information. Panorama is not impacted by this vulnerability.

Announced Source revision 1
Original source ↗

CVE-2026-0301

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-0301

Cloud NGFW

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

PAN-OS

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Prisma Access

Source reference: /containers/cna/affected/2/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "vendor": "Palo Alto Networks",
    "product": "Cloud NGFW",
    "versions": [
      {
        "status": "affected",
        "version": "All",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "AWS",
      "Azure"
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*"
    ],
    "vendor": "Palo Alto Networks",
    "product": "PAN-OS",
    "versions": [
      {
        "status": "unaffected",
        "version": "12.1.0",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "11.2.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "changes": [
          {
            "at": "11.1.16-h1",
            "status": "unaffected"
          }
        ],
        "version": "11.1.0",
        "lessThan": "11.1.16-h1",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "changes": [
          {
            "at": "10.2.8",
            "status": "unaffected"
          }
        ],
        "version": "10.2.0",
        "lessThan": "10.2.8",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Palo Alto Networks",
    "product": "Prisma Access",
    "versions": [
      {
        "status": "unaffected",
        "version": "12.1.0",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "11.2.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "changes": [
          {
            "at": "10.2.10",
            "status": "unaffected"
          }
        ],
        "version": "10.2.0",
        "lessThan": "10.2.10",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]
Related CVEs
CVE-2026-0301

Source reference: /cveMetadata/cveId

Publisher severity

low

Source reference: /containers/cna/metrics

Event
#27183 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement