Palo Alto Networks
PAN-OS
See the latest tracked release, confirm when it was published, and subscribe for update emails.
11.2.13-h1
- Release date
- August 12, 2026
- Security status
- 1 high-severity CVE tracked in the last 90 days. Current version impact is unclear.
Source
Public release notes are linked for the latest stored release.
Release history
See the latest published releases stored for this product.
| Version | Published | Notes |
|---|---|---|
| 11.2.13-h1 | 2026-08-12 | Release Notes |
| 11.2.13 | 2026-07-07 | Release Notes |
| 11.2.12 | 2026-05-26 | Release Notes |
| 11.2.11 | 2026-03-24 | Release Notes |
| 11.2.10-h4 | 2026-03-06 | Release Notes |
Vulnerability tracking
versionPing monitors CVEs for this product. Matching CVEs are listed below. We only display CVEs with a CVSS score of 7.0 or higher that were published within the last 90 days.
Affected status is inferred from published affected version ranges where available. Always verify against the vendor advisory before making production decisions.
| CVE | Severity | Published | Status | Summary |
|---|---|---|---|---|
| CVE-2026-0288 | HIGH (7.2) | 2026-07-08 | Current versionunclear | Multiple buffer overflow vulnerabilities in the User-ID Terminal Server Agent (TSA) component of Palo Alto Networks PAN-OS software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition or potentially execute arbitrary code by sending specially crafted network traffic. The security risk posed by this issue is minimized when the User-ID Terminal Server Agent connectivity is restricted to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://docs.paloaltonetworks.com/ngfw/help/10-2/user-identification/device-user-identification-terminal-services-agents#:~:text=To%20minimize%20security%20risk%2C%20restrict%20TS%20Agent%20connectivity%20to%20trusted%20internal%20IP%20addresses%20only. . Panorama is not impacted by this vulnerability. Affected versions
Show 2 more
|