BugZero | Palo Alto Networks BugID PAN-285169 - Fixed an issue on Panorama where Kerberos superuse...

Palo Alto Networks - Defect ID: PAN-285169

Fixed an issue on Panorama where Kerberos superusers were unable to edit policy rules because the target device tab was grayed out.

Palo Alto Networks - Defect ID: PAN-285169

Fixed an issue on Panorama where Kerberos superusers were unable to edit policy rules because the target device tab was grayed out.

Last updated on January 30th, 2026

BugZero Risk Score
6.3 Medium

Overall: 6.3

Severity: 6.4

Community: 3.7

Lifecycle: 10.0

What is the BugZero Risk Score?

Palo Alto Networks Integration

Learn more about where this data comes from

Palo Alto Networks Integration

Learn more

Bug Scrub Advisor

Streamline upgrades with automated vendor bug scrubs

Bug Scrub Advisor

Learn more

BugZero Enterprise

Wish you caught this bug sooner? Get proactive today.

BugZero Enterprise

Learn more

Bug Details

Description

The earliest recollection of this bug is traced back to PAN-OS 11.1.10-h7 - January 30, 2026. This bug is fixed in PAN-OS versions 11.2.7-h8, 11.2.10, 11.1.10-h7, 11.1.12, 11.1.6-h21. Fixed an issue on Panorama where Kerberos superusers were unable to edit policy rules because the target device tab was grayed out. For more information: https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-10-known-and-addressed-issues/pan-os-11-1-10-h7-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-12-known-and-addressed-issues/pan-os-11-1-12-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-6-known-and-addressed-issues/pan-os-11-1-6-h21-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-10-known-and-addressed-issues/pan-os-11-2-10-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-7-known-and-addressed-issues/pan-os-11-2-7-h8-addressed-issues

Change history

2026-01-30 Added: 11.2.7-h8, 11.2.10, 11.1.10-h7, 11.1.6-h21

2026-01-30 Added: 11.1.10-h7, 11.2.7-h8, 11.1.6-h21

2025-12-02 Added: 11.1.10-h7, 11.2.7-h8, 11.2.10, 11.1.6-h21

2025-12-01 Added: 11.2.10, 11.1.6-h21

2025-12-01 Added: 11.1.6-h21, 11.2.10, 11.1.10-h7

2025-12-01 Added: 11.1.10-h7, 11.2.10, 11.1.6-h21

2025-12-01 Removed: 11.1.12

2025-12-01 Added: 11.2.10, 11.1.10-h7, 11.1.6-h21

2025-10-17 Added: 11.1.6-h21, 11.1.10-h7

2025-10-17 Added: 11.2.10, 11.1.10-h7, 11.1.6-h21

2025-10-09 Added: 11.1.12

Relevant Products

Click on a version to see all relevant bugs

Affected versions:No known affected versions

Fixed versions: 11.2.7-h8, 11.2.10, 11.1.10-h7, 11.1.12, 11.1.6-h21

Relevant Products

Click on a version to see all relevant bugs

Affected versions:No known affected versions

Fixed versions: 11.2.7-h8, 11.2.10, 11.1.10-h7, 11.1.12, 11.1.6-h21

Top Palo Alto Networks Defects

6.3Defect ID: PAN-258039
Fixed an issue where the firewall displayed the incorrect rule name when a threat log was generated for Inline Cloud Analyzed CMD Injection Traffic Detection.
6.3Defect ID: PAN-283053
Fixed an issue where the firewall experienced high disk space utilization, which caused the firewall to become non-functional.
6.3Defect ID: PAN-285169
Fixed an issue on Panorama where Kerberos superusers were unable to edit policy rules because the target device tab was grayed out.
6.3Defect ID: PAN-289383
( PA-800 series firewalls only ) Upgrading firewalls to PAN-OS 11.0 or later causes SFP ports to go non-operational when the firewall uses forced port mode and the connected peer device operates without auto-negotiation. Workaround: Enable auto-negotiation on the connected peer firewall.
6.3Defect ID: PAN-285436
Fixed an issue where a selective push from Panorama caused the firewall Security policy rules to be removed on firewalls associated with the device group. This occurred when the base configuration version chosen for the selective push preceded the device configuration import operation, which caused the imported configuration to not be included in the pushed configuration.

Ready to prevent the next vendor outage?

Get a demo

Palo Alto Networks - Defect ID: PAN-285169

Fixed an issue on Panorama where Kerberos superusers were unable to edit policy rules because the target device tab was grayed out.

Palo Alto Networks - Defect ID: PAN-285169

Fixed an issue on Panorama where Kerberos superusers were unable to edit policy rules because the target device tab was grayed out.

Last updated on January 30th, 2026

BugZero Risk Score6.3 Medium

Bug Details

Top Palo Alto Networks Defects

Ready to prevent the next vendor outage?

Links

BugZero Risk Score
6.3 Medium