PAN-OS is the operating system that runs Palo Alto Networks firewalls. The same software family also runs Panorama, the company's management server for administering many firewalls from one place. It provides the firewall functions, the web-based administration interface and the management APIs that administrators use to configure the device.
Because a firewall sits at the edge of a network and often has broad visibility and trusted access, weaknesses in the operating system or its management features can be high-impact. Vendors publish security advisories for PAN-OS that describe which versions and which configurations are affected, and releases are issued to fix them.
Whether a particular device is affected depends on its PAN-OS version, the maintenance release it runs, and which features are enabled. Some advisories apply only to specific configurations, so running an older release is not automatically proof of exposure, and running a current one is not proof of safety if a feature is exposed in a risky way. Check the vendor advisory for the exact versions and conditions that apply.
To assess your own devices, record the PAN-OS version on each firewall and Panorama server, compare it with the vendor's advisory and fixed releases, and confirm which management and portal features are reachable and from where. Apply fixed releases through your normal change process, and review the device logs for unexpected administrator sessions or configuration changes if you believe a device may have been exposed.