---
type: Addressed
product: PAN-OS
version: 10.2.16-h7
---

## BLANK-000000

Fixes were made to address the following CVEs:

- [CVE-2026-0265](https://security.paloaltonetworks.com/CVE-2026-0265)
- [CVE-2026-0264](https://security.paloaltonetworks.com/CVE-2026-0264)
- [CVE-2026-0262](https://security.paloaltonetworks.com/CVE-2026-0262)
- [CVE-2026-0261](https://security.paloaltonetworks.com/CVE-2026-0261)
- [CVE-2026-0258](https://security.paloaltonetworks.com/CVE-2026-0258)
- [CVE-2026-0257](https://security.paloaltonetworks.com/CVE-2026-0257)
- [CVE-2026-0256](https://security.paloaltonetworks.com/CVE-2026-0256)
- [CVE-2026-0259](https://security.paloaltonetworks.com/CVE-2026-0259)
- [CVE-2026-0300](https://security.paloaltonetworks.com/CVE-2026-0300)

## PAN-316911

```caveat
VM-Series firewalls on Amazon Web Services (AWS) environments only
```

Fixed an issue where a newly bootstrapped firewall required a management server restart, relicensing, or license push from Panorama to invoke the device certificate.

## PAN-313828

Fixed an issue where the firewall did not forward traffic due to memory issues on a forwarding component.

## PAN-308507

```caveat
Panorama managed firewalls only
```

Fixed an issue where the firewall intermittently failed to maintain active log forwarding streams to Strata Logging Service (SLS) even when duplicate logging and enhanced application logging were enabled.

## PAN-305415

Fixed an issue where commits caused high dataplane CPU utilization and briefly increased Packet Descriptors, which disrupted traffic.

## PAN-303051

Fixed an issue on Panorama where a memory leak occurred related to the reportd process due to retaining memory that was temporarily used for report generation instead of releasing the memory for reuse, which resulted in continuous accumulation and memory exhaustion.

## PAN-301409

Fixed an issue where Panorama failed to perform a selective push to a managed device when device tags were added or modified on the policy rules. The selective push failed with the error message Failed to generate selective push configuration. Schema validation failed. Please try a full push.

## PAN-297610

Fixed an issue where the firewall became unresponsive after an upgrade due to the fsck command scanning drive partitions in parallel with the root partition, which caused the process to take an extended amount of time.

## PAN-297295

```caveat
VM-Series firewalls in Microsoft Azure environments only
```

Fixed an issue where the firewall repeatedly restarted due to high packet rates on the synthetic path in DPDK mode.

## PAN-295470

Fixed an issue on the firewall where the useridd process continuously increased its memory consumption, which resulted in an OOM condition that caused the firewall to restart.

## PAN-292393

Fixed an issue where TFTP file transfers intermittently timed out in active-active HA pairs when the TFTP control channel was processed by one firewall and the data channel was processed by the other. This occurred because the firewall receiving the data channel failed to match the predicted session due to asynchronous processing of HA messages.

## PAN-291067

Fixed an issue where the devsrvr process periodically exceeded its virtual memory limit and restarted, which led to intermittent outages.

## PAN-289249

Fixed an issue where a memory leak occurred on the reportd process when a WildFire update was initiated while device telemetry data collection was in progress. This resulted in an OOM condition.

## PAN-286094

Fixed an issue where the firewall did not forward logs to SLS when using a proxy server configuration due to an OCSP validation failure.

## PAN-285208

Fixed an issue where the firewall did not automatically recover after a machine check exception (MCE) occurred.

## PAN-242952

Fixed an issue where high SSL traffic depleted flex memory, which prevented the firewall from revalidating SSLVPN client CAs during configuration pushes.
