Description
An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to bypass firewall security policy enforcement, allowing network traffic that should be blocked to reach protected services.
Cloud NGFW and Panorama are not impacted by this vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Palo Alto Networks | Cloud NGFW | — | All |
| Palo Alto Networks | PAN-OS | 12.1.0 – < 12.1.8, 11.2.0 – < 11.2.13, 11.1.0 – < 11.1.16, 10.2.0 – < 10.2.18-h8 | 12.1.8 |
| Palo Alto Networks | Panorama | — | All |
| Palo Alto Networks | Prisma Access | 11.2.0 – < 11.2.7-h18, 10.2.0 – < 10.2.10-h39 | 11.2.7-h18 |
Advisories 3
- SSA-104023 SSA-104023: Multiple Vulnerabilities in Palo Alto Networks PAN-OS on RUGGEDCOM APE1808 Devices Siemens ProductCERT · Nov 10, 2026
- NCSC-2026-0227 Kwetsbaarheden verholpen in Palo Alto Networks PAN-OS NCSC-NL (Netherlands) · Jul 13, 2026
- WID-SEC-2026-2261 Palo Alto Networks PAN-OS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 9, 2026
References
- https://security.paloaltonetworks.com/CVE-2026-0280 vendor-advisory