Skip to content
VulniPulse
Sign in
Advisory severityCritical9.2Vendor: HighPalo Alto Networks Updated

Critical [CVE-2026-109618 +1] Impact of Critical Vulnerabilities in PHP (, CVE-2026-109619) on Palo Alto Networks Products

This critical-severity Palo Alto Networks advisory covers CVE-2026-109618 and CVE-2026-109619 affecting PAN-OS, Panorama.

Aggregated and source-linked by VulniPulse. Data sources, validation and limitations. This bulletin covers 2 CVEs; its score, affected versions and guidance may apply to different issues within that bulletin.

CVE-2026-109618 Source published

VulniPulse record published Record updated

CVE-2026-109618CVE-2026-109619
Affected products & platforms
Palo Alto NetworksPAN-OSFirewallPanoramaPAN-OS / Panorama
Open source advisory

Android app · Google Play

Monitor future Palo Alto Networks CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features

Summary

CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (, CVE-2026-109619) on Palo Alto Networks Products

Affected products named by the advisory: PAN-OS; Panorama.

Affected versions
  • PAN-OS All
  • Panorama All

Official advisory · high-confidence parse· fetched 7 hours ago·verify at source

Fixed versions
  • PAN-OS: None
  • Panorama: None

Official advisory · high-confidence parse· fetched 7 hours ago·verify at source

Mitigation checklist

Recommended fix / mitigation
  • This issue will be fixed in the upcoming releases of PAN-OS.
  • This advisory will be updated with fixed versions and release estimates as they become available.
Temporary workarounds
  • Customers with Frontier Virtual Patching received advance coverage, released via Threat ID 543004, which was released at 10:21 PM PT on Oct 20.
  • After publication of the vulnerability and patches, Advanced Threat Prevention (ATP) has also released standard IPS coverage (via signatures 543004, 97622, 97623, 97624, 97625), released Oct 21st.
  • The security risk posed by this issue on PAN-OS is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines.

Official advisory · high-confidence parse· fetched 7 hours ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Sign in to join the discussion.