Fixes were made to address the following CVEs:

• CVE-2026-0322
• CVE-2026-0321
• CVE-2026-0320
• CVE-2026-0319
• CVE-2026-0318
• CVE-2026-0317
• CVE-2026-0316

(PA-5440 firewalls only) Fixed an issue where SaaS applications were incorrectly blocked even when a higher-order security rule should have allowed the traffic, which occurred due to an unexpected policy rematch behavior. With this fix, security policy rules are correctly applied during policy rematch, ensuring expected traffic flow.

Fixed an issue where device telemetry uploads would fail, which led to critical alerts in the system logs. With this fix, telemetry data uploads complete successfully.

(PA-4xx Firewalls) Fixed an issue where firewalls rebooted unexpectedly after an upgrade. With this fix, firewalls now operate stably after an upgrade.

(PA-520, PA-545-POE, PA-555-POE, PA-550 firewalls only) Fixed an issue where a commit operation would fail, which was caused by incorrectly updated capacity numbers. With this fix, commit operations complete successfully.

(VM-100 firewalls in FIPS mode only) Fixed an issue where SSL sessions were discarded when forward proxy decryption was enabled, which occurred when the random number generator experienced resource exhaustion under high load. With this fix, the firewall maintains SSL sessions as expected during periods of high decryption activity.

(Panorama appliances in Log Collector mode only) Fixed an issue where the log collectors became unstable for an extended period of time when receiving large amounts of traffic.

Fixed an issue where the DNS proxy would intermittently stop resolving DNS queries, which prevented users from accessing the internet, and which was observed during periods of high CPU utilization for the dnsproxy process. With this fix, the DNS proxy consistently resolves queries, ensuring reliable internet access.