Back to search

Palo Alto Networks

PAN-OS

See the latest tracked release, confirm when it was published, and subscribe for update emails.

12.2 Switch to this train 12.1 Switch to this train 11.2 Current train 11.1 Switch to this train
Current version
Last checked: 2026-10-20

11.2.16

Release date
October 15, 2026
Security status
2 high-severity CVEs tracked in the last 90 days. Current version not affected.

Source

endoflife.date

Public release notes are linked for the latest stored release.

View release notes Subscribe to updates

Release history

See the latest published releases stored for this product.

Version Published Notes
11.2.16 2026-10-15 Release Notes
11.2.15 2026-09-08 Release Notes
11.2.13-h1 2026-08-12 Release Notes
11.2.13 2026-07-07 Release Notes
11.2.12 2026-05-26 Release Notes
11.2.11 2026-03-24 Release Notes
11.2.10-h4 2026-03-06 Release Notes

Vulnerability tracking

versionPing monitors CVEs for this product. Matching CVEs are listed below. We only display CVEs with a CVSS score of 7.0 or higher that were published within the last 90 days.

Affected status is inferred from published affected version ranges where available. Always verify against the vendor advisory before making production decisions.

CVE Severity Published Status Summary
CVE-2026-0322 HIGH (8.6) 2026-10-14 Current versionnot affected

A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma® Access are not impacted by this vulnerability.

Affected versions
  • From (including) 12.2.0 - Up to (excluding) 12.2.4
  • From (including) 12.1.0 - Up to (excluding) 12.1.10-h2
Show 3 more
  • From (including) 11.2.0 - Up to (excluding) 11.2.16
  • From (including) 11.1.0 - Up to (excluding) 11.1.16-h3
  • From (including) 10.2.0 - Up to (excluding) 10.2.18-h12
CVE-2026-0310 HIGH (7.2) 2026-09-10 Current versionnot affected

A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web or dataplane interface to cause a denial of service (DoS) condition on VM-Series firewalls or execute arbitrary code with root privileges on the PA-Series firewalls. The security risk posed by this issue is minimized when the management interface is restricted to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . Panorama is impacted by this vulnerability.

Affected versions
  • From (including) 12.2.0 - Up to (excluding) 12.2.3
  • From (including) 12.1.0 - Up to (excluding) 12.1.4-h10
Show 3 more
  • From (including) 11.2.0 - Up to (excluding) 11.2.4-h21
  • From (including) 11.1.0 - Up to (excluding) 11.1.4-h36
  • From (including) 10.2.0 - Up to (excluding) 10.2.7-h37