BugZero | Palo Alto Networks BugID PAN-215488 - Fixed an issue where an expired Trusted Root CA wa...

Palo Alto Networks - Defect ID: PAN-215488

Fixed an issue where an expired Trusted Root CA was used to sign the forward proxy leaf certificate during SSL Decryption.

Palo Alto Networks - Defect ID: PAN-215488

Fixed an issue where an expired Trusted Root CA was used to sign the forward proxy leaf certificate during SSL Decryption.

Last updated on July 15th, 2026

BugZero Risk Score
9.3 High

Overall: 9.3

Severity: 10.0

Community: 3.7

Lifecycle: 10.0

What is the BugZero Risk Score?

Palo Alto Networks Integration

Learn more about where this data comes from

Palo Alto Networks Integration

Learn more

BugZero Plan

Streamline upgrades with automated vendor bug scrubs

BugZero Plan

Learn more

BugZero Prevent

Wish you caught this bug sooner? Get proactive today.

BugZero Prevent

Learn more

Bug Details

Description

Disclaimer

Hotfix versions were inferred because the vendor did not list them explicitly: 10.1.9-h1, 10.1.9-h2

Overview

Fixed an issue where an expired Trusted Root CA was used to sign the forward proxy leaf certificate during SSL Decryption.

Impact

SSL decryption fails.

root_cause

Mistakenly using cache for expired intermediate certificate

workaround

Clear certificate cache

Change history

Links

Original Vendor Announcement

Relevant Products

Click on a version to see all relevant bugs

Affected versions:9.1.0, 9.1.1, 9.1.2, 9.1.3, 9.1.4, 9.1.5, 9.1.6, 9.1.7, 9.1.8, 9.1.9, 9.1.10, 9.1.11, 9.1.12, 9.1.13, 9.1.14, 9.1.15, 10.1.0, 10.1.1, 10.1.2, 10.1.3, 10.1.4, 10.1.5, 10.1.6, 10.1.7, 10.1.8, 10.1.9, 10.1.9-h1, 10.1.9-h2, 10.2.0, 10.2.1, 10.2.2, 10.2.3, 11.0.0

Fixed versions: 11.0.1, 9.1.17, 10.1.10, 10.2.4, 10.1.9-h3

Relevant Products

Click on a version to see all relevant bugs

Fixed versions: 11.0.1, 9.1.17, 10.1.10, 10.2.4, 10.1.9-h3

Top Palo Alto Networks Defects

6.3Defect ID: PAN-283053
Fixed an issue where the firewall experienced high disk space utilization, which caused the firewall to become non-functional.
6.3Defect ID: PAN-304718
Fixed an issue where OSPF and BGP outages occurred due to an process restart during clientless VPN content rewrite processing.
6.3Defect ID: PAN-312706
Fixed an issue where the firewalls restarted due to a function lacking a NULL-pointer sanity check.
6.3Defect ID: PAN-301113
Fixed an issue where the XML API returned the error Access to this vsys is unauthorized when generating a report for a specific vsys, even when the administrator had access to that vsys. This was due to the API session not correctly populating the vsysvector field with the user's allowed vsys.
6.3Defect ID: PAN-292079
( Panorama appliances only ) Fixed an issue where the data on scheduled SaaS Application Usage Reports was different than the data on on-demand reports generated via Run Now .

Palo Alto Networks Integration

Learn more about where this data comes from

Palo Alto Networks Integration

Learn more

BugZero Plan

Streamline upgrades with automated vendor bug scrubs

BugZero Plan

Learn more

BugZero Prevent

Wish you caught this bug sooner? Get proactive today.

BugZero Prevent

Learn more

Ready to prevent the next vendor outage?

Get a demo

Palo Alto Networks - Defect ID: PAN-215488

Fixed an issue where an expired Trusted Root CA was used to sign the forward proxy leaf certificate during SSL Decryption.

Palo Alto Networks - Defect ID: PAN-215488

Fixed an issue where an expired Trusted Root CA was used to sign the forward proxy leaf certificate during SSL Decryption.

Last updated on July 15th, 2026

BugZero Risk Score9.3 High

Bug Details

Disclaimer

Overview

Impact

root_cause

workaround

Links

Top Palo Alto Networks Defects

Ready to prevent the next vendor outage?

Palo Alto Networks - Defect ID: PAN-215488

Fixed an issue where an expired Trusted Root CA was used to sign the forward proxy leaf certificate during SSL Decryption.

Palo Alto Networks - Defect ID: PAN-215488

Fixed an issue where an expired Trusted Root CA was used to sign the forward proxy leaf certificate during SSL Decryption.

Last updated on July 15th, 2026

BugZero Risk Score9.3 High

Bug Details

Disclaimer

Overview

Impact

root_cause

workaround

Links

Top Palo Alto Networks Defects

Ready to prevent the next vendor outage?

BugZero Risk Score
9.3 High

BugZero Risk Score
9.3 High