Palo Alto Networks
- Aliases / services
- パロアルトネットワークス / PAN-OS / Panorama / Unit 42 / Palo Alto Networks
- Official website
- https://www.paloaltonetworks.com/
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
PAN-OS — PA-Series / VM-Series / Panorama
- Response status
- Fix available; application required
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
The October 27 table lists fixes including 12.2.4-h1 and 12.1.7-h11; other branches retain October 27–30 estimated dates.
Scope: Applies to the PAN-OS management HTTPS UI and XML API. Dataplane interfaces are affected only with a management profile. GlobalProtect portal, gateway and Clientless VPN are not impacted.
What users should do
Restrict management access and verify the official table and actual distribution for your branch before applying the fix.
Official service URL
Source URLs
- PHP vulnerabilities on Palo Alto Networks Productshttps://security.paloaltonetworks.com/CVE-2026-109618Response evidence
Cortex XCORE (SaaS)
- Response status
- Remediation complete
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
The official footnote states that a remediation patch was deployed on October 21.
Scope: Applies only to the service and configuration in this entry.
What users should do
Check the official service notice.
Official service URL
Source URLs
- PHP vulnerabilities on Palo Alto Networks Productshttps://security.paloaltonetworks.com/CVE-2026-109618Response evidence
WildFire Cloud
- Response status
- Remediation complete
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
The official footnote states that a remediation patch was deployed on October 22.
Scope: This entry is separate from WildFire Appliance.
What users should do
Check the official service notice.
Official service URL
Source URLs
- PHP vulnerabilities on Palo Alto Networks Productshttps://security.paloaltonetworks.com/CVE-2026-109618Response evidence
Related official sources
- PHP vulnerabilities on Palo Alto Networks ProductsOfficial notice
Comments