CVE-2026-0301PAN-OS: Information Disclosure Vulnerability in URL Filtering

Description

An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network access to obtain sensitive information. Panorama is not impacted by this vulnerability.

Timeline

Scores

EPSS (exploitation in 30 days)

0.56% · top 53% of all CVEs (14 Nov 2026)

CISA SSVC

Exploitation: none · Automatable: no · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: Low 1.7.

Affected products

• Palo Alto Networks · Cloud NGFW

  • affected All

• Palo Alto Networks · PAN-OS

  • unaffected 12.1.0
  • unaffected 11.2.0
  • affected 11.1.0 – < 11.1.16-h1
  • affected 10.2.0 – < 10.2.8

• Palo Alto Networks · Prisma Access

  • unaffected 12.1.0
  • unaffected 11.2.0
  • affected 10.2.0 – < 10.2.10

What to do

Solution: Version Minor Version Suggested Solution Cloud NGFW*Customers who prefer to upgrade can work with Palo Alto Networks support to schedule an on-demand software upgrade.PAN-OS 12.1 12.1.2 through 12.1.6-h*No action needed.PAN-OS 11.2 11.2.0 through 11.2.12 No action needed. PAN-OS 11.1 11.1.0 through 11.1.16-h* Upgrade to 11.1.16-h1 or later. PAN-OS 10.2 10.2.0 through 10.2.* Upgrade to 10.2.8 or 11.1.16-h1 or later. All older unsupported PAN-OS versions Upgrade to a supported fixed version.Prisma Access 12.1 12.1.2 through 12.1.* No action needed.Prisma Access 11.2 11.2.0 through 11.2* No action needed. Prisma Access 10.2 10.2.0 through 10.2.* Upgrade to 10.2.10 or later. * See the note under Product Status for information regarding Prisma Access and Cloud NGFW upgrades.

Workaround: Customers can mitigate this issue by limiting the Response Page Variables https://docs.paloaltonetworks.com/advanced-url-filtering/administration/url-filtering-features/url-filtering-response-pages/url-filtering-response-page-objects#idf281835b-ab7c-4553-93e2-46967443f9f9_id8313c239-3cf5-4bee-8909-e8e047b70b44 on their response page to only those in the Predefined URL Filtering Response Pages https://docs.paloaltonetworks.com/advanced-url-filtering/administration/url-filtering-features/url-filtering-response-pages/predefined-url-filtering-response-pages#ida9f33d58-e2ea-4a6f-9b4f-0ab42fd6921f . https://docs.paloaltonetworks.com/advanced-url-filtering/administration/url-filtering-features/url-filtering-response-pages/predefined-url-filtering-response-pages#ida9f33d58-e2ea-4a6f-9b4f-0ab42fd6921f The variables that are included in our predefined response pages (user, url, category, pan_form) are not impacted by this vulnerability.

Exploitation: Palo Alto Networks is not aware of any malicious exploitation of this issue.

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• EUVD EUVD-2026-57714 (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2026-0301](https://cveledger.app/badge/CVE-2026-0301.svg)](https://cveledger.app/cve/CVE-2026-0301)

Record last updated 15 Oct 2026, 01:11 UTC.