Fixes were made to address the following CVEs:

• CVE-2026-0283
• CVE-2026-0287
• CVE-2026-0279
• CVE-2026-0282
• CVE-2026-0288
• CVE-2026-0286
• CVE-2026-0285
• CVE-2026-0280
• CVE-2026-0284
• CVE-2026-0281

Fixed an issue where a firewall functioning as an Area Border Router did not correctly translate NSSA Type-7 LSAs to Type-5 LSAs when OSPF neighbors set the Nt bit in the NSSA Area, and routes were not advertised to upstream OSPF neighbors in the backbone area, which resulted in traffic being silently discarded.

Fixed an issue where device telemetry intermittently failed to send files, which resulted in critical alerts in system files.

Fixed an issue where External Dynamic List (EDL) refresh and commit operations remained in a pending state, which prevented any subsequent operations from completing.

Fixed an issue where SIP sessions stopped progressing after the firewall received fragmented packets, fragmented at header field.

Fixed an issue where an unexpected reboot occurred when Inline Cloud Analysis was enabled in an Anti-Spyware and Vulnerability profile.

Fixed an issue where the reportd process stopped responding, which caused the firewall to reboot.

(Firewalls in active/passive configurations only) Fixed an issue where NTP status intermittently showed as rejected on the active firewall, which prevented the firewalls from synchronizing time.

Fixed an issue where traffic was blocked due to a mismatch between the URL category specified in the Security policy rule and the URL filter profile when custom URL categories with the same FQDN were configured.

Fixed an issue where firewalls with Memory Integrity Checking Architecture enabled rebooted unexpectedly due to accessing an invalid memory address. This occurred because the forwarding data structure index exceeded its designed limit.

Fixed an issue on Panorama where deleting objects resulted in errors indicating references in Security policy rules.

Fixed an issue where DLP logs accumulated in the logrcvr cache when using DLP in mirror mode.

Fixed an issue on Panorama where Rule Usage and Apps Seen under Security policy rules stopped incrementing.