Nothing EITW. IPv6 packet processing vuln in the dataplane allows unauth bypass of firewall security policy enforcement. In 20-fucking-26.
Auth bypass in LSVPN ( or LSPVN, depending on which advisory you look at ).
Multiple unauth DoS vulns in Pan-OS.
Multiple BoFs in User-ID TSA.