PAN-OS (< 11.2.13-H5) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/pan-os--11.2.13-h5/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 11 Nov 2026 21:54:03 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgPalo Alto Networks PAN-OS: Sensitive Information Disclosure (CVE-2026-0331)https://feed.craftedsignal.io/briefs/2026-11-panos-disclosure-cve-2026-0331/Wed, 11 Nov 2026 21:54:03 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-panos-disclosure-cve-2026-0331/An unauthenticated remote information disclosure vulnerability in PAN-OS allows attackers to exfiltrate firewall and session data via the dataplane interface.Palo Alto Networks has disclosed a sensitive information disclosure vulnerability (CVE-2026-0331) in PAN-OS software. The vulnerability allows an unauthenticated remote attacker with network access to retrieve sensitive firewall and session information by sending crafted traffic to or through a dataplane interface. No special configuration is required for exposure, and the impact is higher on PA-Series and VM-Series firewalls. Panorama is not affected by this vulnerability.

Impact

Successful exploitation may allow for the exfiltration of sensitive information, including session-related data, which could facilitate further reconnaissance or network compromise. Palo Alto Networks has confirmed that the impact is lower for Prisma Access, as it requires an authenticated user and restricted external access.

Recommendation

  • Upgrade all affected PA-Series and VM-Series firewalls to the specified patched versions immediately.
  • For Prisma Access and Cloud NGFW, coordinate with Palo Alto Networks Support for scheduled maintenance or on-demand upgrades.
  • Inventory all currently deployed PAN-OS instances across the environment to identify systems running vulnerable versions.
]]>mediumadvisorycvevulnerabilityinformation-disclosurenetwork-security