An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network access to obtain sensitive information. Panorama is not impacted by this vulnerability.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://security.paloaltonetworks.com/CVE-2026-0301 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 1.7 · paloaltonetworksNVD modified 2026-10-15 02:18
Affected (CPE criteria) 6
cpe:2.3:a:paloaltonetworks:cloud_ngfw:-:*:*:*:*:aws:*:*cpe:2.3:a:paloaltonetworks:cloud_ngfw:-:*:*:*:*:azure:*:*cpe:2.3:a:paloaltonetworks:prisma_access:*:*:*:*:innovation:*:*:*cpe:2.3:a:paloaltonetworks:prisma_access:*:*:*:*:preferred:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:*:-:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:11.1.16:-:*:*:*:*:*:*