CVE-2026-0301 PAN-OS: Information Disclosure Vulnerability in URL Filtering
Unauthenticated attackers can obtain sensitive information via the URL Filtering feature in PAN-OS software.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-0301?
CVE-2026-0301 is a low-severity vulnerability in Paloaltonetworks Pan-Os, published on 13 Aug 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network access to obtain sensitive information.
Panorama is not impacted by this vulnerability.
Weakness: CWE-908
Which versions are affected by CVE-2026-0301?
It affects 3 products.
Products include Paloaltonetworks Cloud Ngfw, Paloaltonetworks Pan-Os, Paloaltonetworks Prisma Access.
How do I fix CVE-2026-0301?
No fix has been published for CVE-2026-0301 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-0301 being exploited?
There is no known exploitation of CVE-2026-0301 in the wild and no public exploit code.
Other vulnerabilities in Paloaltonetworks Pan-Os
Sources
Also known as GHSA-69pg-94v9-fcx7.