What is PAN-SA-2026-0005?

PAN-SA-2026-0005 is a security advisory published by Palo Alto Networks Security Advisories. PAN-SA-2026-0005 Informational Bulletin: Precautionary Fixes for Non-Exploitable OSS CVEs in PAN-OS

Why does PAN-SA-2026-0005 have no CVE ID yet?

Palo Alto Networks Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

Which products are affected by PAN-SA-2026-0005?

PAN-SA-2026-0005 affects 1 product, including: PAN-OS.

PAN-SA-2026-0005Disclosed before NVD

PAN-SA-2026-0005 Informational Bulletin: Precautionary Fixes for Non-Exploitable OSS CVEs in PAN-OS

Vendor

Palo Alto Networks Security Advisories

Published

April 8, 2026

Last Modified

April 8, 2026

📋 Description

The Palo Alto Networks Product Security Assurance team has evaluated the following open source software (OSS) CVEs as they relate to PAN-OS. These CVEs were determined to have no impact on PAN-OS, but they have been fixed out of an abundance of caution.

🎯 Affected products1

PAN-OS

✅ Remediation

The OSS CVEs are fixed in the respective PAN-OS versions.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/PAN-SA-2026-0005