Mixed PAN-OS estates and CVE-2026-0321: why Cloud NGFW being unaffected is not a holiday

Palo Alto Networks released several October 2026 advisories, bundled by CERT-FR as CERTFR-2026-AVI-1326. While CVE-2026-0311 and CVE-2026-0312 affect Checkov by Prisma Cloud, CVE-2026-0313 impacts Cortex XSOAR and Cortex XSIAM. CVE-2026-0314 and CVE-2026-0315 target GlobalProtect. Specifically, CVE-2026-0321 causes unauthenticated denial of service in PAN-OS dataplanes across versions 10.2 through 12.2, potentially triggering maintenance mode. Notably, Cloud NGFW and Panorama remain unaffected by CVE-2026-0321, though other vulnerabilities impact different components.