BaselineWatch
Desk

CVE-2026-0301

1.7 low SSVC exploitation: none Modified

An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network access to obtain sensitive information. Panorama is not impacted by this vulnerability.

Fix

Patch, vendor advisory and mitigation references on NVD 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 1.7 · paloaltonetworksNVD modified 2026-10-15 02:18

Affected (CPE criteria) 6

  • cpe:2.3:a:paloaltonetworks:cloud_ngfw:-:*:*:*:*:aws:*:*
  • cpe:2.3:a:paloaltonetworks:cloud_ngfw:-:*:*:*:*:azure:*:*
  • cpe:2.3:a:paloaltonetworks:prisma_access:*:*:*:*:innovation:*:*:*
  • cpe:2.3:a:paloaltonetworks:prisma_access:*:*:*:*:preferred:*:*:*
  • cpe:2.3:o:paloaltonetworks:pan-os:*:-:*:*:*:*:*:*
  • cpe:2.3:o:paloaltonetworks:pan-os:11.1.16:-:*:*:*:*:*:*

References 2