Information Disclosure in Palo Alto PAN-OS URL Filtering

Executive Summary

CVE-2026-0301 is an information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS software. It allows an unauthenticated attacker with network access to obtain sensitive information. The flaw specifically affects firewalls where URL filtering is enabled with customized response pages.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if your PAN-OS firewall has URL filtering enabled with customized response pages. Review logs for unusual information disclosure attempts. No specific commands are provided in the resources, but monitoring network traffic for unauthorized data exfiltration may help.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this vulnerability to access sensitive data through the URL Filtering feature. This may include internal network details or other confidential information. The impact is limited to systems with customized response pages enabled.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, potentially violating compliance requirements such as GDPR or HIPAA. Organizations may face legal or regulatory penalties if data breaches occur due to this flaw.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade to fixed versions: PAN-OS 11.1.16-h1 or later, PAN-OS 10.2.8 or later, or Prisma Access 10.2.10 or later. Alternatively, limit response page variables to predefined options to reduce exposure.

Useful 0 Not Useful 0