Palo Alto Networks November 2026 security advisories: what is fixed
Published 11/11/2026 18:57
Timeline
2 events over 57 min
- 11/11/2026 18:00ConfirmedPalo Alto Networks Security Advisories+57 min
- 11/11/2026 18:57Published on WatchtowerPro CISO
In short
Palo Alto Networks published fixes for 9 vulnerabilities in 3 products on 11/11/2026. None is marked exploited by the vendor or CISA. None critical. These counts follow the vendor's own feed; the vendor's page has the details of every fix.
Summary
9 fixes in 3 products · 0 exploited · none critical
| Type of flaw | Fixes |
|---|---|
| Other or not stated | 9 |
| Severity | Fixes |
|---|---|
| Medium | 4 |
| Low | 5 |
Products
| Product family | Fixes | Products | Exploited | Critical |
|---|---|---|---|---|
| PAN-OS | 7 | 1 | – | – |
| Checkov by Prisma Cloud | 1 | 1 | – | – |
| GlobalProtect App | 1 | 1 | – | – |
Counted 11/11/2026 18:00 Amsterdam time from the vendor's own feed. A critical count is CVSS 9.0 or more, or the vendor's or NVD's “critical”; “not scored yet” means neither the vendor nor NVD has scored the fix.
Flaws with their own notice
- Palo Alto Networks PAN-OS: management interface remote code execution (CVE-2026-0322) exploited in the wild, fixes available · PAN-OS - CVE-2026-0325, CVE-2026-0326, CVE-2026-0327, CVE-2026-0328, CVE-2026-0329 +2
Full details
Palo Alto Networks's own page for this release lists every fix, the affected versions and the updates.
What to do now
- Install Palo Alto Networks's November 2026 security updates on every affected system, following the Palo Alto Networks Security Advisories.
- Start with the flaws the vendor or CISA marks exploited, then the critical ones; the vendor's own page for this release lists every fix: https://security.paloaltonetworks.com/
- Where a flaw has its own Watchtower notice (linked on this page), follow that notice first: it says what is known about it and what to do.
ReconX customers see the full notice - and their own systems
Our customers are alerted at every phase. Until a patch exists, the ReconX agent watches their servers from the inside for anomalies, and our outside view - the attacker's view - shows which systems to fix first.
In ReconX: the full analysis and all 1 source with their dates. And technology matching: which of your systems run Palo Alto Networks, at which version, fixed or not - and what each one needs.