topic 11.2.10-h6 details?? in Next-Generation Firewall Discussions

11.2.10-h6 details??

D.Gwozdz — Wed, 13 May 2026 16:28:55 GMT

Can we please having more info than "This hotfix includes performance and bug fixes"?

Re: 11.2.10-h6 details??

Adrian_Jensen — Wed, 13 May 2026 17:17:18 GMT

Yeah, release notes on all the updates yesterday appear to just be that. Seems that documentation hasn't caught up with emergency patches yet. Patches released yesterday (along with more scheduled 5/28) are supposed to be to address critical vulnerability CVE-2026-0300, so guessing more detail wont be available until patches are out and well distributed and the vulnerability details are published.

Re: 11.2.10-h6 details??

Adrian_Jensen — Wed, 13 May 2026 17:54:41 GMT

Edit: Palo just published the May 2026 Security Advisories (and an update 50min later) with 3 high severity CVEs. It appears that some of these were also addressed in the just released versions and those to be released on 5/28. Of particular note:

CVE-2026-0263 - Remote Code Execution in IKEv2 Processing

CVE-2026-0264 - Buffer Overflow in DNS Proxy

CVE-2026-0265 - Authentication Bypass with Cloud Authentication (no 10.2.x fixes yet)