Fixes were made to address the following CVEs:

• CVE-2026-0310
• CVE-2026-0309

Fixed an issue where the firewall introduced out-of-order packet delivery for certain data streams, which resulted in clients receiving data in an incorrect sequence.

Fixed an issue where the push scope window did not display the target devices when attempting to push configurations from Panorama, which required manual selection of templates or device groups. With this fix, the push scope window now correctly populates with the intended push scope.

Fixed an issue where the Panorama web interface showed blank Host Information Profile (HIP) Match log entries when opened in Detailed Log View. With this fix, the Detailed Log View now displays the expected information for HIP Match logs.

Fixed an issue where Panorama did not automatically resume syslog forwarding over TCP after the syslog server became unavailable or was restarted.

Fixed an issue where BFD sessions did not reestablish on the newly elected leader after a leader failover event that occurred when the previous leader node was suspended.

Fixed an issue where, after upgrading Panorama, a custom admin role with Object Level Changes disabled did not automatically populate out-of-sync firewalls in the push scope.

Fixed an issue where importing PKCS12 certificates failed with the error Import of certificate and private-key failed. Failed to extract certificate.

(PA-7500 firewalls in HA cluster configurations only) Fixed an issue where interfaces intermittently remained offline after a cluster failover.

Fixed an issue where selective configuration pushes from Panorama failed after an upgrade, which caused shared policy rules to go out of sync. With this fix, selective configuration pushes complete successfully and policies remain in sync.

(M-700 appliances only) Fixed an issue where the Elasticsearch processes repeatedly restarted and log collectors showed the Elasticsearch health status as red.

Fixed an issue where the firewall sent a BFD admin down message during an NGFW cluster failover, which caused BGP sessions to terminate and routes to be lost.

Fixed an issue where device telemetry intermittently failed to send files, which resulted in critical alerts in system files.

Fixed an issue where SFP ports did not establish a link with a third-party peer device when forced speed was configured on the firewall and the peer device was set to nonegotiate.

Fixed an issue where SSL traffic was silently dropped when traffic was processed by a Security policy with an Anti-Spyware profile that had Inline cloud Analysis enabled for SSL C2 Detector with an action other than allow or alert.

Fixed an issue where SCM did not update device telemetry for the firewall after upgrading to an affected release.

Fixed an issue where multiple EDL fetches were queued and did not complete.

Fixed an issue where the configd process stopped responding after pushing configuration changes from Panorama to the firewall.

Fixed an issue where the firewall repeatedly rebooted and entered maintenance mode, and a factory reset was required.

Fixed an issue where committing a scheduled configuration push on Panorama caused the configd process to stop responding unexpectedly.

Fixed an issue on Panorama where a database component unexpectedly stopped when Panorama was deployed using an .ova file or upgraded/downgraded to an affected PAN-OS version. This occurred due to a required directory not being created during the initial provisioning workflow. With this fix, the necessary directory is created automatically during deployment.

(Firewalls in active/passive configurations only) Fixed an issue where NTP status intermittently showed as rejected on the active firewall, which prevented the firewalls from synchronizing time.

Fixed an issue where pushing multiple policy rules failed when the policy rules contained a large number of dynamic address object groups or user groups.