CVE-2026-0308: PAN-OS 12.1.0 to before 12.1.10; status changes: 12.1.10 — unaffected, 11.2.0 to before 11.2.13-h2; status changes:…

Affected technology

PAN-OS · 12.1.0 to before 12.1.10; status changes: 12.1.10 — unaffected, 11.2.0 to before 11.2.13-h2; status changes: 11.2.13-h2 — unaffected, 11.1.0 to before 11.1.16-h2; status changes: 11.1.16-h2 — unaffected
Palo Alto Networks

Prisma Access · Exact affected versions not specified by the source
Palo Alto Networks

RUGGEDCOM APE1808 · 0 to before *
Siemens

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · High privileges required · Passive user interaction

What an attacker can do

Vendor/CNA’s CVSS 4.0 assessment (base score 1.1/10) rates confidentiality and integrity impact as low; availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.