This is our weekly roundup of Palo Alto Networks security advisories published or updated between Oct 19–25, 2026. Palo Alto Networks published 1 advisory this week (1 high).
Each entry links to the official advisory, which is the authoritative source for affected versions, fixed versions and workarounds.
Advisories this week
| Advisory | Title | Severity (CVSS) | Affected products | Status |
|---|---|---|---|---|
| CVE-2026-109618 | Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products | HIGH 8.7 | Bridgecrew, Cloud NGFW, Cortex XDR Agent, Cortex XDR Broker VM, Cortex XSIAM, Cortex XSOAR, Cortex Xpanse, Cortex XCORE (SaaS), GlobalProtect App, Idira, PAN-OS, Prisma Cloud, Prisma Access, Prisma Access Agent, Prisma SD-WAN ION, Prisma SD-WAN Controller, Prisma SD-WAN On-Prem Controller, Strata Cloud Manager, Next Generation Trust Security, Trust Protection Foundation, WildFire Appliance WF-500 and WF-500-B, WildFire Cloud | New |
What we recommend doing this week
- Check your exposure first. Confirm the exact PAN-OS, GlobalProtect, Panorama and Prisma Access versions you run (Dashboard > General Information, or
show system infofrom the CLI) and which features are enabled. Many advisories only apply when a specific feature, such as the GlobalProtect portal or the management web interface, is configured. - Patch in priority order. Anything on the CISA KEV list or rated critical comes first, especially on internet-facing interfaces. High-severity issues follow in your next maintenance window. Medium and low issues can usually be bundled into routine upgrades.
- Lock down the management interface. Management access should only be reachable from trusted administrative networks, never from the internet. This single control reduces the impact of many management-plane vulnerabilities.
- Use workarounds and threat signatures as a bridge, not a fix. Where an advisory lists Threat Prevention signatures or workarounds, apply them while you schedule the upgrade, then upgrade to a fixed release.
- Upgrade safely. Read the release notes, take a configuration backup, upgrade the passive member of an HA pair first and verify traffic, logging and VPNs before upgrading the active member.
Not sure whether this week’s advisories affect you? SK IT Solutions can review your PAN-OS versions and configuration against current advisories and plan the upgrade. See our Palo Alto firewall health checks or book a free consultation.
Sources: Palo Alto Networks Security Advisories and the CISA Known Exploited Vulnerabilities catalog (catalog version 2026.10.23). This summary is generated automatically from the official feeds each week. Always confirm affected and fixed versions in the official advisory before making changes.