--- type: Addressed product: PAN-OS version: 11.1.10-h25 --- ## BLANK-000000 Fixes were made to address the following CVEs: - [CVE-2026-0265](https://security.paloaltonetworks.com/CVE-2026-0265) - [CVE-2026-0264](https://security.paloaltonetworks.com/CVE-2026-0264) - [CVE-2026-0263](https://security.paloaltonetworks.com/CVE-2026-0263) - [CVE-2026-0262](https://security.paloaltonetworks.com/CVE-2026-0262) - [CVE-2026-0261](https://security.paloaltonetworks.com/CVE-2026-0261) - [CVE-2026-0258](https://security.paloaltonetworks.com/CVE-2026-0258) - [CVE-2026-0257](https://security.paloaltonetworks.com/CVE-2026-0257) - [CVE-2026-0256](https://security.paloaltonetworks.com/CVE-2026-0256) - [CVE-2026-0259](https://security.paloaltonetworks.com/CVE-2026-0259) - [CVE-2026-0300](https://security.paloaltonetworks.com/CVE-2026-0300) ## PAN-323243 Fixed an issue where a configd crash occurred when the **Policies > Security** view was updated or refreshed in the web interface. ## PAN-317215 ```caveat VM-Series firewalls on ESXi with Intel E810 NICs using PCI passthrough ``` Fixed an issue where the brdagent process became unresponsive during data port initialization, which resulted in system instability, interface outages, HA split-brain conditions, and unexpected reboots during failover. ## PAN-317155 Fixed an issue where the link status of log port 1 and log port 2 were unable to be monitored via SNMP due to the OIDs for the individual ports not being available. ## PAN-314875 ```caveat PA-7500 firewalls only ``` Fixed an issue where firewall logs were not visible in the Strata Logging Service even though cloud logging was enabled and the firewall was successfully forwarding logs. ## PAN-314126 Fixed an issue where session rematch did not properly apply updated Security policy rules to existing traffic flows after committing changes, which caused traffic to still be allowed when a new Security policy was set to **Deny**. ## PAN-311166 Fixed an issue where the firewall rebooted unexpectedly to the all_task_1 process repeatedly restarting. ## PAN-310472 Fixed an issue on the web interface where checkboxes for **default information originate** and ABR in OSPF NSSA configurations were automatically enabled which resulted in unexpected configuration changes. ## PAN-308377 ```caveat PA-7050 firewalls in HA configurations only ``` Fixed an issue where the firewall reached 100% disk utilization due to the logrcvr process repeatedly restarting and dumping core files due to a blocked hints processing thread, which caused a failover. ## PAN-307714 ```caveat VM-Series firewalls only ``` Fixed an issue where insufficient i-node space was available on the sysroot0 partition. ## PAN-302196 Fixed an issue where the dataplane stopped responding when cleaning up expired sessions currently in Advanced Threat Prevention hold mode. ## PAN-277629 Fixed an issue where the firewall did not match the correct policy for SSL forward decrypted HTTP/2 traffic when upgrading from PAN-OS 10.2.9-h1 to PAN-OS 11.2.3.