CVE Vulnerabilities

CVE-2026-0301

Use of Uninitialized Resource

Published: Aug 13, 2026 | Modified: Aug 28, 2026
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OSĀ® software enables an unauthenticated user with network access to obtain sensitive information.

Panorama is not impacted by this vulnerability.

Weakness

The product uses or accesses a resource that has not been initialized.

Affected Software

NameVendorStart VersionEnd Version
Cloud_ngfwPaloaltonetworks- (including)- (including)
Prisma_accessPaloaltonetworks*6.0.0 (excluding)
Pan-osPaloaltonetworks10.2.0 (including)10.2.8 (excluding)
Pan-osPaloaltonetworks11.1.0 (including)11.1.16 (excluding)
Pan-osPaloaltonetworks11.1.16 (including)11.1.16 (including)

Potential Mitigations

References