Disclaimer

Hotfix versions were inferred because the vendor did not list them explicitly: 11.1.6-h1, 11.1.6-h2, 11.1.6-h3, 11.1.6-h4, 11.1.6-h5, 11.1.6-h6, 11.1.6-h7, 11.1.6-h8, 11.1.6-h9, 11.1.6-h10, 11.1.6-h11, 11.1.6-h12, 11.1.6-h13, 11.1.6-h14, 11.1.6-h15, 11.1.6-h16, 11.1.6-h17, 11.1.6-h18, 11.1.6-h19, 11.1.6-h20, 11.1.10-h1, 11.1.10-h2, 11.1.10-h3, 11.1.10-h4, 11.1.10-h5, 11.1.10-h6 Known affected versions were inferred from fixed-version data and were not explicitly confirmed by the vendor: 11.2.10-h13, 12.1.4-h3

The earliest recollection of this bug is traced back to PAN-OS 11.1.10-h7 - August 12, 2026. This bug is fixed in PAN-OS versions 11.1.6-h21, 11.1.10-h7, 11.2.11, 12.1.5. Fixed an issue on Panorama where reassociating a vsys from one device group to another in a multi-vsys environment resulted in another vsys from the same firewall being removed from the original device group. This resulted in the device being moved into the no device groups attached group, a superuser was required to manually reattach the device. For more information: https://docs.paloaltonetworks.com/ngfw/release-notes/12-1/pan-os-12-1-5-known-and-addressed-issues/pan-os-12-1-5-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-10-known-and-addressed-issues/pan-os-11-1-10-h7-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-6-known-and-addressed-issues/pan-os-11-1-6-h21-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-11-known-and-addressed-issues/pan-os-11-2-11-addressed-issues