Disclaimer

Hotfix versions were inferred because the vendor did not list them explicitly: 11.1.4-h1, 11.1.4-h2, 11.1.4-h3, 11.1.4-h4, 11.1.4-h5, 11.1.4-h6, 11.1.4-h7, 11.1.4-h8, 11.1.4-h9, 11.1.4-h10, 11.1.4-h11, 11.1.4-h12, 11.1.4-h13, 11.1.4-h14, 11.1.6-h1, 11.1.6-h2, 11.1.6-h3, 11.1.7-h1, 11.2.4-h1, 11.2.4-h2, 11.2.4-h3, 11.2.4-h4, 11.2.4-h5, 11.2.4-h6, 11.2.4-h7, 11.2.4-h8, 11.2.4-h9

The earliest recollection of this bug is traced back to PAN-OS 11.1.4-h15 - July 08, 2026. This bug is fixed in PAN-OS versions 11.1.8, 11.2.4-h10, 11.1.7-h2, 11.1.4-h15, 11.1.6-h4, 11.2.6. ( M-600 appliances only ) Fixed an issue where the Elasticsearch cluster certificate (CC) status displayed with a past expiration date, which caused all shards to be unassigned. For more information: https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-4-known-and-addressed-issues/pan-os-11-1-4-h15-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-6-known-and-addressed-issues/pan-os-11-1-6-h4-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-7-known-and-addressed-issues/pan-os-11-1-7-h2-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-8-known-and-addressed-issues/pan-os-11-1-8-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-4-known-and-addressed-issues/pan-os-11-2-4-h10-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-6-known-and-addressed-issues/pan-os-11-2-6-addressed-issues