VYPR
← All advisories
High severity7.5NVD Advisory· Published Aug 13, 2026· Updated Oct 15, 2026

CVE-2026-0301

CVE-2026-0301

Description

An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network access to obtain sensitive information.

Panorama is not impacted by this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Paloaltonetworks/Cloud Ngfw2 versions
    cpe:2.3:a:paloaltonetworks:cloud_ngfw:-:*:*:*:*:aws:*:*+ 1 more
    • cpe:2.3:a:paloaltonetworks:cloud_ngfw:-:*:*:*:*:aws:*:*
    • cpe:2.3:a:paloaltonetworks:cloud_ngfw:-:*:*:*:*:azure:*:*
  • Paloaltonetworks/Prisma Access2 versions
    cpe:2.3:a:paloaltonetworks:prisma_access:*:*:*:*:innovation:*:*:*+ 1 more
    • cpe:2.3:a:paloaltonetworks:prisma_access:*:*:*:*:innovation:*:*:*range: <6.0.0
    • cpe:2.3:a:paloaltonetworks:prisma_access:*:*:*:*:preferred:*:*:*range: <6.0.0
  • Paloaltonetworks/Panos3 versions
    cpe:2.3:o:paloaltonetworks:pan-os:*:-:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:paloaltonetworks:pan-os:*:-:*:*:*:*:*:*range: >=10.2.0,<10.2.8
    • cpe:2.3:o:paloaltonetworks:pan-os:11.1.16:-:*:*:*:*:*:*
    • (no CPE)

Patches

Vulnerability mechanics

References

2

News mentions

1