Disclaimer

Hotfix versions were inferred because the vendor did not list them explicitly: 10.2.13-h1, 10.2.13-h2, 10.2.13-h3, 10.2.13-h4, 10.2.13-h5, 10.2.13-h6, 10.2.13-h7, 10.2.13-h8, 10.2.13-h9, 10.2.13-h10, 10.2.13-h11, 10.2.13-h12, 10.2.13-h13, 10.2.13-h14, 10.2.13-h15, 10.2.13-h17 Known affected versions were inferred from fixed-version data and were not explicitly confirmed by the vendor: 11.1.12, 11.2.10-h13, 12.1.4-h5

The earliest recollection of this bug is traced back to PAN-OS 10.2.13-h16 - August 21, 2026. This bug is fixed in PAN-OS versions 11.2.11, 11.1.13, 12.1.5, 10.2.17, 10.2.13-h18, 10.2.13-h16. Fixed an issue on the firewall where the VM monitor source remained in the Getting All status, which prevented dynamic address groups from updating IP addresses for new EC2 instances. This issue occurred due to a race condition where two threads that simultaneously retrieved IP address tag information from AWS VM monitoring sources became stuck while reading the XML file. For more information: https://docs.paloaltonetworks.com/ngfw/release-notes/12-1/pan-os-12-1-5-known-and-addressed-issues/pan-os-12-1-5-addressed-issues https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-13-known-and-addressed-issues/pan-os-10-2-13-h16-addressed-issues https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-13-known-and-addressed-issues/pan-os-10-2-13-h18-addressed-issues https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-17-known-and-addressed-issues/pan-os-10-2-17-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-13-known-and-addressed-issues/pan-os-11-1-13-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-11-known-and-addressed-issues/pan-os-11-2-11-addressed-issues