What is PAN-SA-2026-0006?

PAN-SA-2026-0006 is a security advisory published by Palo Alto Networks Security Advisories. PAN-SA-2026-0006 Informational Bulletin: Impact assessment of OSS CVEs in PAN-OS

Why does PAN-SA-2026-0006 have no CVE ID yet?

Palo Alto Networks Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

Which products are affected by PAN-SA-2026-0006?

PAN-SA-2026-0006 affects 1 product, including: PAN-OS.

PAN-SA-2026-0006Disclosed before NVD

PAN-SA-2026-0006 Informational Bulletin: Impact assessment of OSS CVEs in PAN-OS

Vendor

Palo Alto Networks Security Advisories

Published

April 8, 2026

Last Modified

April 8, 2026

📋 Description

The Palo Alto Networks Product Security Assurance team has evaluated the following open source software (OSS) CVEs as they relate to PAN-OS software. While PAN-OS software may include the affected OSS package, PAN-OS does not offer any scenarios required for an attacker to successfully exploit these vulnerabilities and is not impacted.

🎯 Affected products1

PAN-OS

✅ Remediation

The OSS CVEs are fixed in the respective PAN-OS versions.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/PAN-SA-2026-0006