CVE-2026-0331

Adatlap

CVE: CVE-2026-0331
EUVD: EUVD-2026-123778
GHSA: GHSA-cm3x-hqfq-jqm2
Eszköztípus: IT
Publikálva: 2026. 11. 11. 20:35
Frissítve: 2026. 11. 11. 20:35
Súlyosság: Közepes
Prioritás: Kiemelt
CWE: CWE-200

CVSS-pontszámok

Verzió	Pontszám	Súlyosság	Vektor
4.0	6,6	Közepes	`CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber`

Hálózatról kihasználható · Alacsony komplexitás · Nem szükséges jogosultság · Nem szükséges felhasználói interakció

Eredeti leírás

An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated remote attacker with network access to obtain sensitive firewall and session information by sending traffic to or through a dataplane interface.

Panorama is not affected by this vulnerability.

Érintett termékek

Cloud NGFW Palo Alto Networks Verziók: All
PAN-OS Palo Alto Networks Verziók: 12.2.0 – < 12.2.4-h2; 12.1.0 – < 12.1.10-h4; 11.2.0 – < 11.2.16-h2; 11.1.0 – < 11.1.16-h5; 10.2.0 – < 10.2.18-h14
Prisma Access Palo Alto Networks Verziók: 12.1.0 – < 12.1.10-h4; 11.2.0 – < 11.2.7-h24; 10.2.0 – < 10.2.10-h43

Prioritás

Szint: Kiemelt
Teendő: Soron kívüli intézkedés javasolt: a szoftvert 72 órán belül frissítse. A javításig kísérje figyelemmel a sérülékenység kihasználására utaló jeleket, és ha elérhető, alkalmazza a gyártó által javasolt kerülő megoldást.

Kihasználási státusz

EPSS: 0,00%
Exploitok: Palo Alto Networks is not aware of any malicious exploitation of this issue.

Javítás

Javított verzió: 12.2.4-h2, 12.1.10-h4, 12.1.7-h12, 12.1.4-h14, 11.2.16-h2, 11.2.13-h5, 11.2.10-h18, 11.2.7-h24, 11.2.4-h24, 11.1.16-h5, 11.1.13-h17, 11.1.10-h37, 11.1.7-h13, 11.1.6-h41, 11.1.4-h39, 10.2.18-h14, 10.2.16-h13, 10.2.13-h28, 10.2.10-h43, 10.2.7-h40
Gyártói hivatkozás: Van patch vagy gyártói közlemény a hivatkozások között

Megoldás (CNA)

VERSION MINOR VERSION SUGGESTED SOLUTION
Cloud NGFW Customers who prefer to upgrade can work with Palo Alto
Networks support to schedule an on-demand software upgrade.
PAN-OS 12.2 12.2.0 through 12.2.4-h* Upgrade to 12.2.4-h2 or later.
PAN-OS 12.1 12.1.8 through 12.1.10-h* Upgrade to 12.1.10-h4 or later.
12.1.5 through 12.1.7-h* Upgrade to 12.1.7-h12 or later.
12.1.2 through 12.1.4-h* Upgrade to 12.1.4-h14 or later.
PAN-OS 11.2 11.2.15 through 11.2.16-h* Upgrade to 11.2.16-h2 or later.
11.2.11 through 11.2.13-h* Upgrade to 11.2.13-h5 or 11.2.16-h2 or later.
11.2.8 through 11.2.10-h* Upgrade to 11.2.10-h18 or 11.2.16-h2 or later.
11.2.5 through 11.2.7-h* Upgrade to 11.2.7-h24 or 11.2.16-h2 or later.
11.2.0 through 11.2.4-h* Upgrade to 11.2.4-h24 or 11.2.16-h2 or later.
PAN-OS 11.1 11.1.14 through 11.1.16-h* Upgrade to 11.1.16-h5 or later.
11.1.11 through 11.1.13-h* Upgrade to 11.1.13-h17 or 11.1.16-h5 or later.
11.1.8 through 11.1.10-h* Upgrade to 11.1.10-h37 or 11.1.16-h5 or later.
11.1.7 through 11.1.7-h* Upgrade to 11.1.7-h13 or 11.1.16-h5 or later.
11.1.5 through 11.1.6-h* Upgrade to 11.1.6-h41 or 11.1.16-h5 or later.
11.1.0 through 11.1.4-h* Upgrade to 11.1.4-h39 or 11.1.16-h5 or later.
PAN-OS 10.2 10.2.17 through 10.2.18-h* Upgrade to 10.2.18-h14 or later.
10.2.14 through 10.2.16-h* Upgrade to 10.2.16-h13 or 10.2.18-h14 or later.
10.2.11 through 10.2.13-h* Upgrade to 10.2.13-h28 or 10.2.18-h14 or later.
10.2.8 through 10.2.10-h* Upgrade to 10.2.10-h43 or 10.2.18-h14 or later.
10.2.0 through 10.2.7-h* Upgrade to 10.2.7-h40 or 10.2.18-h14 or later.
All older Upgrade to a supported fixed version.
unsupported
PAN-OS versions
Prisma Access 12.1 12.1.2 through 12.1.10-h* Upgrade to 12.1.10-h4 or later.
Prisma Access 11.2 11.2.0 through 11.2.7-h* Upgrade to 11.2.7-h24 or later.
Prisma Access 10.2 10.2.0 through 10.2.10-h* Upgrade to 10.2.10-h43 or later.

* See the note under Product Status for information regarding Prisma Access upgrades.

Kerülő megoldás (CNA)

No known workarounds exist for this issue.