{"affected":[{"defaultStatus":"unaffected","product":"Cloud NGFW","source":"CNA: palo_alto","vendor":"Palo Alto Networks","versions":[{"status":"affected","version":"All","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"PAN-OS","source":"CNA: palo_alto","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"12.2.4-h2","status":"unaffected"}],"lessThan":"12.2.4-h2","status":"affected","version":"12.2.0","versionType":"custom"},{"changes":[{"at":"12.1.10-h4","status":"unaffected"},{"at":"12.1.7-h12","status":"unaffected"},{"at":"12.1.4-h14","status":"unaffected"}],"lessThan":"12.1.10-h4","status":"affected","version":"12.1.0","versionType":"custom"},{"changes":[{"at":"11.2.16-h2","status":"unaffected"},{"at":"11.2.13-h5","status":"unaffected"},{"at":"11.2.10-h18","status":"unaffected"},{"at":"11.2.7-h24","status":"unaffected"},{"at":"11.2.4-h24","status":"unaffected"}],"lessThan":"11.2.16-h2","status":"affected","version":"11.2.0","versionType":"custom"},{"changes":[{"at":"11.1.16-h5","status":"unaffected"},{"at":"11.1.13-h17","status":"unaffected"},{"at":"11.1.10-h37","status":"unaffected"},{"at":"11.1.7-h13","status":"unaffected"},{"at":"11.1.6-h41","status":"unaffected"},{"at":"11.1.4-h39","status":"unaffected"}],"lessThan":"11.1.16-h5","status":"affected","version":"11.1.0","versionType":"custom"},{"changes":[{"at":"10.2.18-h14","status":"unaffected"},{"at":"10.2.16-h13","status":"unaffected"},{"at":"10.2.13-h28","status":"unaffected"},{"at":"10.2.10-h43","status":"unaffected"},{"at":"10.2.7-h40","status":"unaffected"}],"lessThan":"10.2.18-h14","status":"affected","version":"10.2.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Prisma Access","source":"CNA: palo_alto","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"12.1.10-h4","status":"unaffected"}],"lessThan":"12.1.10-h4","status":"affected","version":"12.1.0","versionType":"custom"},{"changes":[{"at":"11.2.7-h24","status":"unaffected"}],"lessThan":"11.2.7-h24","status":"affected","version":"11.2.0","versionType":"custom"},{"changes":[{"at":"10.2.10-h43","status":"unaffected"}],"lessThan":"10.2.10-h43","status":"affected","version":"10.2.0","versionType":"custom"}]}],"cveId":"CVE-2026-0331","cwes":["CWE-200"],"description":"An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated remote attacker with network access  to obtain sensitive firewall and session information by sending traffic to or through a dataplane interface.\n\n\n\nPanorama is not affected by this vulnerability.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6.6,"severity":"medium","source":"CNA: palo_alto","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber","version":"4.0"},{"score":4.6,"severity":"medium","source":"CNA: palo_alto","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber","version":"4.0"}],"modifiedAt":1794425731346,"publishedAt":1794425731346,"references":[{"source":"CNA: palo_alto","tags":["vendor-advisory"],"url":"https://security.paloaltonetworks.com/CVE-2026-0331"}],"remediation":[{"kind":"fix","source":"CNA: palo_alto","text":"VERSION              MINOR VERSION                SUGGESTED SOLUTION\nCloud NGFW                                        Customers who prefer to upgrade can work with Palo Alto\n                                                  Networks support to schedule an on-demand software upgrade.\nPAN-OS 12.2          12.2.0 through 12.2.4-h*     Upgrade to 12.2.4-h2 or later.\nPAN-OS 12.1          12.1.8 through 12.1.10-h*    Upgrade to 12.1.10-h4 or later.\n                     12.1.5 through 12.1.7-h*     Upgrade to 12.1.7-h12 or later.\n                     12.1.2 through 12.1.4-h*     Upgrade to 12.1.4-h14 or later. \nPAN-OS 11.2          11.2.15 through 11.2.16-h*   Upgrade to 11.2.16-h2 or later.\n                     11.2.11 through 11.2.13-h*   Upgrade to 11.2.13-h5 or 11.2.16-h2 or later.\n                     11.2.8 through 11.2.10-h*    Upgrade to 11.2.10-h18 or 11.2.16-h2 or later.\n                     11.2.5 through 11.2.7-h*     Upgrade to 11.2.7-h24 or 11.2.16-h2 or later.\n                     11.2.0 through 11.2.4-h*     Upgrade to 11.2.4-h24 or 11.2.16-h2 or later.\nPAN-OS 11.1          11.1.14 through 11.1.16-h*   Upgrade to 11.1.16-h5 or later.\n                     11.1.11 through 11.1.13-h*   Upgrade to 11.1.13-h17 or 11.1.16-h5 or later.\n                     11.1.8 through 11.1.10-h*    Upgrade to 11.1.10-h37 or 11.1.16-h5 or later.\n                     11.1.7 through 11.1.7-h*     Upgrade to 11.1.7-h13 or 11.1.16-h5 or later.\n                     11.1.5 through 11.1.6-h*     Upgrade to 11.1.6-h41 or 11.1.16-h5 or later.\n                     11.1.0 through 11.1.4-h*     Upgrade to 11.1.4-h39 or 11.1.16-h5 or later.\nPAN-OS 10.2          10.2.17 through 10.2.18-h*   Upgrade to 10.2.18-h14 or later.\n                     10.2.14 through 10.2.16-h*   Upgrade to 10.2.16-h13 or 10.2.18-h14 or later.\n                     10.2.11 through 10.2.13-h*   Upgrade to 10.2.13-h28 or 10.2.18-h14 or later.\n                     10.2.8 through 10.2.10-h*    Upgrade to 10.2.10-h43 or 10.2.18-h14 or later.\n                     10.2.0 through 10.2.7-h*     Upgrade to 10.2.7-h40 or 10.2.18-h14 or later.\nAll older                                         Upgrade to a supported fixed version.\nunsupported\nPAN-OS versions\nPrisma Access 12.1   12.1.2 through 12.1.10-h*    Upgrade to 12.1.10-h4 or later.\nPrisma Access 11.2   11.2.0 through 11.2.7-h*     Upgrade to 11.2.7-h24 or later.\nPrisma Access 10.2   10.2.0 through 10.2.10-h*    Upgrade to 10.2.10-h43 or later.\n\n\n* See the note under Product Status for information regarding Prisma Access upgrades."},{"kind":"workaround","source":"CNA: palo_alto","text":"No known workarounds exist for this issue."}],"revision":"8f95cb2dbc451f75166bed7ed3e45f19a9d0e5e07c1939b95d650b5d16b2c3c5","sources":[{"modifiedAt":1794425731346,"name":"CNA: palo_alto","retrievedAt":1794427712124,"url":"https://www.cve.org/CVERecord?id=CVE-2026-0331"}],"ssvc":null,"status":"published","title":"PAN-OS: Sensitive Information Disclosure Vulnerability","updatedAt":1794427712124}