Fixed an issue where scheduled SaaS application usage reports were generated incorrectly, and the login page was displayed instead of the report content.

A fix was made to address CVE-2025-0111.

A fix was made to address CVE-2025-0108.

A fix was made to address CVE-2025-0109.

Fixed an issue where TLS 1.3 decryption failed with a bad record MAC error when the firewall was configured to decrypt and inspect TLS traffic.

Fixed an issue where some TLS connections were not handled correctly, which led to instability in the dataplane.

Fixed an issue where traffic was dropped when the accumulation proxy was enabled and header insertion modified packets.

Fixed a Threat log PCAP ID overwrapping issue.

Fixed an issue on hardware firewalls where, when SSL decryption was enabled and Client Hello messages spanned multiple TCP segments, some SSL decrypted sessions failed.

Fixed an issue where Panorama did not display the Source Dynamic Address Group.

Fixed an issue where the manual tuning parameters set sequence was not correct.

(Panorama appliances only) Fixed an issue where the configd process experienced continuous high CPU utilization and repeatedly restarted.

(VM-Series firewalls in Microsoft Azure environments only) Fixed an issue where the firewall displayed 0 for the physical port counters read from MAC.

A fix was made to address CVE-2024-3393.

A fix was made to address CVE-2024-3596.

Fixed an issue where the firewall rebooted when a QSFP28 cable was removed from the port while the port was passing traffic.