Fixed an issue where TFTP file transfers intermittently timed out in active/active HA pairs when the TFTP control channel was processed by one firewall and the data channel was processed by the other. This occurred because the firewall receiving the data channel failed to match the predicted session due to asynchronous processing of HA messages.

Fixed an issue on the web interface where, when you were saving telemetry settings, OK was disabled by default and Cancel was enabled by default.

Fixed an issue where the web interface did not display a message to commit prior changes before attempting a partial configuration load.

Fixed an issue where the CLI did not display a message to commit prior changes before loading a partial configuration.

Fixed an issue where the configuration audit displayed inaccurate information after partially loading the configuration via the CLI, which caused the audit to flag the configuration as deleted or changed.

Fixed an issue where the devsrvr process restarted after a failed commit due to an invalid memory access.

Fixed an issue on the web interface where, when all rules were highlighted when a read-only admin user clicked the Highlight Unused Rules checkbox.

Fixed an issue where log collectors had a low incoming log rate.

Fixed an issue where the error message Failed to reload config files displayed in the system logs even when device telemetry was not enabled.

Fixed an issue where the firewall generated the message Successfully generating a new set of config files in the system logs even when device telemetry was not enabled.

Fixed an issue where an out-of-memory (OOM) condition caused a firewall outage.

Fixed an issue on the firewall where DPDK allocated twice the amount of memory as requested for pre-allocation.

Fixed an issue on firewalls in high availability (HA) configurations where a network loop was detected by switches after suspending HA on the active firewall.

A fix was made to address CVE-2025-0125.

(PA-5450 firewalls only) Fixed an issue where Networking Cards (NC) experienced an internal link fault which caused path monitoring failure on the Dataplane Processing Card (DPC).

A fix was made to address CVE-2025-0128.

A fix was made to address CVE-2025-0115.

A fix was made to address CVE-2025-0126.

Fixed an issue where enabling Inline Cloud Analysis features caused a slow packet buffer leak, which resulted in performance issues and dropped traffic.

Fixed an issue on the web interface where templates incorrectly showed that telemetry was enabled when it was not enabled. With this fix, the telemetry setting is not displayed in the template on the web interface.

Fixed an issue where MLC2 verdict retrieval failed due to a regression in loopback data flag handling.

Fixed an issue on the firewall where the dataplane repeatedly restarted.

Fixed an issue where SSL traffic was impacted when SSL Command and Control detector for Incline Cloud Analysis was set to reset-both, reset-client, reset-server, or drop.

(PA-800 Series firewalls and PA-220 firewalls only) Fixed an issue where executing the CLI command show running resource-monitor ingress-backlogs displayed the following error message: Server error: Failed to interpret the DP response.

A fix was made to address CVE-2025-0127.

(Panorama appliances in Log Collector mode only) Fixed an issue where Panorama stopped processing and saving logs.

A fix was made to address CVE-2025-4231.

Fixed an issue where new Panorama template stacks did not inherit the existing telemetry settings on Panorama.

(PA-5400 Series firewalls only) Fixed an issue on Panorama where device health resources did not populate.