CVE-2026-0301: cloud ngfw Version not applicable in the source CPE; +6 more affected products

Affected technology

cloud ngfw · Version not applicable in the source CPE
paloaltonetworks

prisma access · before 6.0.0 (exclusive)
paloaltonetworks

pan-os · from 10.2.0 (inclusive), before 10.2.8 (exclusive)
paloaltonetworks

pan-os · from 11.1.0 (inclusive), before 11.1.16 (exclusive)
paloaltonetworks

pan-os · 11.1.16
paloaltonetworks

Cloud NGFW · All
Palo Alto Networks

PAN-OS · 11.1.0 to before 11.1.16-h1; status changes: 11.1.16-h1 — unaffected, 10.2.0 to before 10.2.8; status changes: 10.2.8 — unaffected
Palo Alto Networks

Prisma Access · 10.2.0 to before 10.2.10; status changes: 10.2.10 — unaffected
Palo Alto Networks

RUGGEDCOM APE1808 · 0 to before *
Siemens

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

An unauthenticated user with network access can obtain sensitive information. Vendor/CNA’s CVSS 4.0 assessment (base score 1.7/10) rates confidentiality impact as low; integrity and availability impact as none.