Is 10.2.17 affected by CVE-2026-0287?

G.Valfre — Thu, 09 Jul 2026 13:29:23 GMT

Hi,

I'm looking into the new CVE-2026-0287, and I can't figure out if PAN-OS version 10.2.17 is affected.
In the “Product Status” table, the following versions are listed as affected: "<10.2.7-h36, < 10.2.10-h39, < 10.2.13-h23, < 10.2.16-h9, < 10.2.18-h8“
and these others as unaffected ” >= 10.2.7-h36, >= 10.2.10-h39, >= 10.2.13-h23, >= 10.2.16-h9, >= 10.2.18-h8"
10.2.17 is higher than 10.2.16-h9 but lower than 10.2.18-h8, so I don’t understand how to interpret this table.
Furthermore, in the “Solution” table, I see the minor version range listed as “10.2.17 through 10.2.18-h*” and the suggested solution as “Upgrade to 10.2.18-h8 or later.” This leads me to believe that 10.2.17 is affected.

Can anyone help me better understand these tables? Thanks.

topic Is 10.2.17 affected by CVE-2026-0287? in Next-Generation Firewall Discussions

Is 10.2.17 affected by CVE-2026-0287?