( Firewalls in active/active HA configurations only ) Fixed an issue where NAT failures occurred due to the IP pool not releasing unused resources in the Active Secondary firewall. This occurred because the secondary firewall attempts to release a Persistent DIPP NATed port that was originally allocated by the NAT policy from first firewall, leading to a ownership mismatch during the session teardown process.

Fixed an issue where a command injection vulnerability could occur due to improper input sanitization.