BugZero | Palo Alto Networks BugID PAN-304718 - Fixed an issue where OSPF and BGP outages occurred...

Palo Alto Networks - Defect ID: PAN-304718

Fixed an issue where OSPF and BGP outages occurred due to an process restart during clientless VPN content rewrite processing.

Palo Alto Networks - Defect ID: PAN-304718

Fixed an issue where OSPF and BGP outages occurred due to an process restart during clientless VPN content rewrite processing.

Last updated on May 13th, 2026

BugZero Risk Score
6.3 Medium

Overall: 6.3

Severity: 6.4

Community: 3.7

Lifecycle: 10.0

What is the BugZero Risk Score?

Palo Alto Networks Integration

Learn more about where this data comes from

Palo Alto Networks Integration

Learn more

Bug Scrub Advisor

Streamline upgrades with automated vendor bug scrubs

Bug Scrub Advisor

Learn more

BugZero Enterprise

Wish you caught this bug sooner? Get proactive today.

BugZero Enterprise

Learn more

Bug Details

Views: 2

Description

The earliest recollection of this bug is traced back to PAN-OS 11.1.10-h21 - May 13, 2026. This bug is fixed in PAN-OS versions 11.2.7-h11, 12.1.5, 11.2.10-h4, 11.1.13-h2, 11.2.11, 11.1.10-h21, 11.1.6-h29, 11.1.14. Fixed an issue where OSPF and BGP outages occurred due to an process restart during clientless VPN content rewrite processing. Fixed an issue where OSPF and BGP outages occurred due to an all_task process restart during clientless VPN content rewrite processing. When using GlobalProtect Clientless VPN, the firewall may restart unexpectedly, causing routing protocol (OSPF and BGP) outages. This issue occurs during web content processing for clientless VPN sessions. Workaround: To prevent this issue until you can upgrade to a fixed release, disable clientless VPN in your GlobalProtect portal configuration. For more information: https://docs.paloaltonetworks.com/ngfw/release-notes/12-1/pan-os-12-1-3-known-and-addressed-issues/pan-os-12-1-3-known-issues https://docs.paloaltonetworks.com/ngfw/release-notes/12-1/pan-os-12-1-5-known-and-addressed-issues/pan-os-12-1-5-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-10-known-and-addressed-issues/pan-os-11-1-10-h21-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-13-known-and-addressed-issues/pan-os-11-1-13-h2-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-14-known-and-addressed-issues/pan-os-11-1-14-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-6-known-and-addressed-issues/pan-os-11-1-6-h29-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-10-known-and-addressed-issues/pan-os-11-2-10-h4-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-11-known-and-addressed-issues/pan-os-11-2-11-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-7-known-and-addressed-issues/pan-os-11-2-7-h11-addressed-issues

Change history

2026-05-13 Added: 12.1.4

2026-05-13 Removed: 12.1.3

2026-03-31 Added: 12.1.4

2026-03-31 Removed: 12.1.3

2026-03-31 Added: 12.1.4

2026-03-31 Removed: 12.1.3

2026-03-31 Added: 12.1.4

2026-03-31 Removed: 12.1.3

2026-03-31 Added: 12.1.4

2026-03-31 Removed: 12.1.3

2026-03-31 Added: 12.1.4

2026-03-31 Removed: 12.1.3

2026-03-24 Added: 12.1.3

Relevant Products

Click on a version to see all relevant bugs

Affected versions:12.1.3

Fixed versions: 11.2.7-h11, 12.1.5, 11.2.10-h4, 11.1.13-h2, 11.2.11, 11.1.10-h21, 11.1.6-h29, 11.1.14

Relevant Products

Click on a version to see all relevant bugs

Affected versions:12.1.3

Fixed versions: 11.2.7-h11, 12.1.5, 11.2.10-h4, 11.1.13-h2, 11.2.11, 11.1.10-h21, 11.1.6-h29, 11.1.14

Top Palo Alto Networks Defects

6.3Defect ID: PAN-300671
Fixed an issue where traffic reports that were generated with destination/source and destination/source hostnames were not displayed in IPv4 format.
6.3Defect ID: PAN-314201
Fixed an issue on PAN-OS 12.1 releases where intermittent traffic drops occurred over IPSec VPN tunnels to third-party firewalls during the IPSec rekey due to the firewall failing to inform the peer to delete the old SA after moving to the new one.
6.3Defect ID: PAN-313623
Fixed an issue where the /opt/pancfg/mgmt/ssl/private/ directory on Palo Alto Networks devices with TPM support became 100% utilized due to an accumulation of undeleted .pub_pem files. This occurred because executing the show device-certificate status CLI command initiated a process that generated these files but failed to remove them, which prevented the fetching of new device certificates.
6.3Defect ID: PAN-304718
Fixed an issue where OSPF and BGP outages occurred due to an process restart during clientless VPN content rewrite processing.
6.3Defect ID: PAN-313849
Fixed an issue on Panorama where the logd process exited unexpectedly when handling syslog forwarding.

Ready to prevent the next vendor outage?

Get a demo

Palo Alto Networks - Defect ID: PAN-304718

Fixed an issue where OSPF and BGP outages occurred due to an process restart during clientless VPN content rewrite processing.

Palo Alto Networks - Defect ID: PAN-304718

Fixed an issue where OSPF and BGP outages occurred due to an process restart during clientless VPN content rewrite processing.

Last updated on May 13th, 2026

BugZero Risk Score6.3 Medium

Bug Details

Top Palo Alto Networks Defects

Ready to prevent the next vendor outage?

Links

BugZero Risk Score
6.3 Medium