Disclaimer

Hotfix versions were inferred because the vendor did not list them explicitly: 10.2.6-h1, 10.2.6-h2, 10.2.6-h3, 10.2.6-h4, 10.2.6-h5, 10.2.10-h1, 10.2.10-h2, 10.2.10-h3, 10.2.10-h4, 10.2.10-h5, 10.2.10-h6, 10.2.10-h7, 10.2.10-h8, 10.2.10-h9, 10.2.10-h10, 10.2.10-h11, 10.2.10-h12, 10.2.10-h13, 10.2.10-h14, 10.2.10-h15, 10.2.10-h16, 10.2.10-h17, 10.2.10-h18, 10.2.10-h19, 10.2.10-h20, 10.2.13-h1, 10.2.13-h2, 10.2.13-h3, 10.2.13-h4, 10.2.13-h5, 10.2.13-h6, 11.1.4-h1, 11.1.4-h2, 11.1.4-h3, 11.1.4-h4, 11.1.4-h5, 11.1.4-h6, 11.1.4-h7, 11.1.4-h8 Known affected versions were inferred from fixed-version data and were not explicitly confirmed by the vendor: 11.2.4-h17

The earliest recollection of this bug is traced back to PAN-OS 10.2.10-h21 - July 08, 2026. This bug is fixed in PAN-OS versions 10.2.10-h21, 10.2.6-h6, 11.1.6, 11.2.5, 11.1.4-h9, 10.2.14, 10.2.13-h7. Fixed an issue where stale BGP routes were advertised to peers even when they were not present in the local RIB table. For more information: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-10-known-and-addressed-issues/pan-os-10-2-10-h21-addressed-issues https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-13-known-and-addressed-issues/pan-os-10-2-13-h7-addressed-issues https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-14-known-and-addressed-issues/pan-os-10-2-14-addressed-issues https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-6-known-and-addressed-issues/pan-os-10-2-6-h6-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-4-known-and-addressed-issues/pan-os-11-1-4-h9-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-6-known-and-addressed-issues/pan-os-11-1-6-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-5-known-and-addressed-issues/pan-os-11-2-5-addressed-issues