CERT-FR warns of Palo Alto Networks vulnerability CVE-2026-111497 in PAN-OS and Prisma Cloud enabling remote code execution
CERT-FR published advisory CERTFR-2026-AVI-1396 on 27 October 2026 about a vulnerability in Palo Alto Networks products, tracked as CVE-2026-111497. According to the advisory, an attacker could achieve remote arbitrary code execution, remote denial of service and breach of data confidentiality; data integrity is also listed as affected. The affected products are PAN-OS (11.2.x, 12.1.x and 12.2.x branches) and Prisma Cloud Application Security Transporter Client. The advisory does not report active exploitation and gives no CVSS score or IOCs. Palo Alto Networks published its own bulletin on 26 October 2026.
Entenda a falha
A vulnerabilidade
CVE-2026-111497 is a vulnerability in Palo Alto Networks PAN-OS and the Prisma Cloud Application Security Transporter Client. According to CERT-FR, an attacker could achieve remote arbitrary code execution, remote denial of service and loss of data confidentiality, with data integrity also listed as affected. Affected: PAN-OS 11.2.x before 11.2.10-h17, 12.1.x before 12.1.7-h11, 12.2.x before 12.2.4-h1, and Prisma Cloud Application Security Transporter Client before 0.2.9. The advisory gives no attack vector, authentication requirement, CVSS score or component. Fixes for PAN-OS 12.1.4-h13, 12.1.10-h3, 11.2.4-h23, 11.2.7-h23, 11.2.13-h4 and 11.2.16-h1 are still pending.
Como foi descoberta
Palo Alto Networks published its own security bulletin on 26 October 2026, and CERT-FR followed with advisory CERTFR-2026-AVI-1396 on 27 October 2026. The articles do not say who found the flaw or how it was reported. The advisory does not report active exploitation.
Explicação gerada por IA a partir da matéria e dos artigos, em 28/10/2026 14:29.
Detalhes técnicos
- CVE: CVE-2026-111497.
- Impacts listed: remote arbitrary code execution, remote denial of service, breach of data confidentiality, breach of data integrity.
- Affected: PAN-OS 11.2.x before 11.2.10-h17; PAN-OS 12.1.x before 12.1.7-h11; PAN-OS 12.2.x before 12.2.4-h1; Prisma Cloud Application Security Transporter Client before 0.2.9.
- The advisory gives no attack vector, authentication requirement or severity details.
Remediação
- Consult the Palo Alto Networks security bulletin for CVE-2026-111497 (26 October 2026) to obtain fixes.
- Fixes are still pending publication for PAN-OS 12.1.4-h13, 12.1.10-h3, 11.2.4-h23, 11.2.7-h23, 11.2.13-h4 and 11.2.16-h1; monitor the vendor bulletin for their release.
Linha do tempo
-
CERT-FR warns of Palo Alto Networks vulnerability CVE-2026-111497 in PAN-OS and Prisma Cloud enabling remote code execution
ler a análise desta fonte ocultar
CERT-FR published advisory CERTFR-2026-AVI-1396 on 27 October 2026 about a vulnerability in Palo Alto Networks products, tracked as CVE-2026-111497. According to the advisory, an attacker could achieve remote arbitrary code execution, remote denial of service and breach of data confidentiality; data integrity is also listed as affected. The affected products are PAN-OS (11.2.x, 12.1.x and 12.2.x branches) and Prisma Cloud Application Security Transporter Client. The advisory does not report active exploitation and gives no CVSS score or IOCs. Palo Alto Networks published its own bulletin on 26 October 2026.
Technical Details
- CVE: CVE-2026-111497.
- Impacts listed: remote arbitrary code execution, remote denial of service, breach of data confidentiality, breach of data integrity.
- Affected: PAN-OS 11.2.x before 11.2.10-h17; PAN-OS 12.1.x before 12.1.7-h11; PAN-OS 12.2.x before 12.2.4-h1; Prisma Cloud Application Security Transporter Client before 0.2.9.
- The advisory gives no attack vector, authentication requirement or severity details.
Remediation
- Consult the Palo Alto Networks security bulletin for CVE-2026-111497 (26 October 2026) to obtain fixes.
- Fixes are still pending publication for PAN-OS 12.1.4-h13, 12.1.10-h3, 11.2.4-h23, 11.2.7-h23, 11.2.13-h4 and 11.2.16-h1; monitor the vendor bulletin for their release.