AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

GoogleGHSA-3rw9-99mf-q87w

Palo Alto Vulnerability Report

Google

Published Dec 18, 2025 · updated Dec 26, 2025

High
Fix: upgrade to TBD or later
GitHub advisory

Impact Vendor

Palo Alto Networks

Affected Product

PA-54xx All supported versions of PAN-OS.

Tested: PAN-OS 10.x - 10.2.16-h1 PAN-OS 11x - 11.2.1

Important Dates

The report was officially received by Palo Alto Networks PSIRT on Aug 25, 2025. The standard 90-day disclosure period concluded on Nov 23, 2025. Public release of the full details is scheduled for mid 2026, following an exception to our policy granted at the request of Palo Alto PSIRT, citing the complexity of the required fix and the need for additional time to deploy a patch. Palo Alto will have the beta release fix ready by March 30, 2026.

Affected versions

PackageAffectedFixed in
security-research
Product
< TBDTBD
Details and references

More Google advisories

All Google