Fixes were made to address the following CVEs:

• CVE-2026-0283
• CVE-2026-0287
• CVE-2026-0279
• CVE-2026-0282
• CVE-2026-0288
• CVE-2026-0286
• CVE-2026-0285
• CVE-2026-0280
• CVE-2026-0284
• CVE-2026-0281

Fixed an issue where a selective push from Panorama to the firewall was successful even when applying rename operation failed in selective push, which resulted in configurations on the firewall being deleted. With this fix, the selective push will fail when applying rename operation fails.

Fixed an issue where the sslmgr process stopped responding when attempting to display the OSCP host cache.

Fixed an issue where IDE traffic did not function as expected when both HTTP head insertion and DLP inspection were enabled.

Fixed an issue where processes stopped responding unexpectedly.

Fixed an issue where device telemetry intermittently failed to send files, which resulted in critical alerts in system files.

Fixed an issue where telemetry data was not sent to the cloud due to the firewall being unable to resolve the destination server's FQDN even when a proxy server was configured. With this fix, the firewall properly sends telemetry data through the configured proxy server without requiring direct public DNS resolution for the telemetry server's FQDN.

Fixed an issue where SCM did not update device telemetry for the firewall after upgrading to an affected release.

Fixed an issue where 403 errors occurred when performing "show config effective-running" API query after downgrading to an affected PAN-OS release.

Fixed an issue where upgrades to managed firewalls from Panorama failed.

Fixed an issue where the firewall did not redistribute its application routes to BGP peers. This occurred in multi-mesh deployments with the multi-cloud networking feature enabled.

Fixed an issue where pushing a new object from Panorama to a Cloud NGFW Device Group unexpectedly removed existing Panorama-pushed policy rules, even though the Push Preview did not show any deletions, which led to traffic disruptions.

Fixed an issue where GlobalProtect users were unable to connect

Fixed an issue where a memory leak occurred when processing device and vsys tags.