Fixes were made to address the following CVEs:

• CVE-2026-0310
• CVE-2026-0309

Fixed an issue where a PA-455 firewall in FIPS-CC mode did not start correctly after upgrading from PAN-OS 12.1.8 to 12.2.2.

Fixed an issue where installing WildFire® content updates disabled PAN-OS Shield.

Fixed an issue where a PA-450 firewall restarted with the error general system-shutdown 1: The system is shutting down due to md initiated dataplane restarts exhausted.

Fixed an issue where the dnsproxyd process became unresponsive on TCP/53 connections on VM-Series firewalls.

Fixed an issue where PA-5280 firewalls experienced multiple all_pktproc process restarts, resulting in the dataplane going down and an HA failover.

Fixed an issue where, after upgrading a PA-450R-5G firewall, the cellular interface did not come up and entered a Dead Zone state.

Fixed an issue where some ACE applications did not match the correct security policy when the service was set to Application Default on PA-5450 firewalls.

Fixed an issue where importing a PKCS12 certificate on Panorama® failed with the error Import of certificate and private-key failed. Failed to extract certificate.

Fixed an issue where management plane resource exhaustion caused commit latency across Prisma® Access gateways.

Fixed an issue where a PA-450 firewall dropped new connections with the error Packet dropped, session allocation failure.

Fixed an issue where hidden NFS files under /opt/var/s7/lp/log/pan filled up disk space on PA-7080 firewalls.

Fixed a memory leak in the connection handling process.