Security Advisory

CVE-2026-0258

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-13 18:08:36
Last updated 2026-07-14 12:45:08
Assigner palo_alto
CVSS score 4.8
State PUBLISHED

Description

A server-side request forgery (SSRF) vulnerability in the IKEv2 implementation of Palo Alto Networks PAN-OS® software allows an unauthenticated attacker to cause the firewall to send network requests to unintended destinations or cause a denial of service (DoS) condition. Panorama, Cloud NGFW and Prisma® Access are not impacted by these vulnerabilities.