CVE-2026-0258

EPSS 0.33%
Veröffentlicht 13.05.2026 18:08:36
Zuletzt bearbeitet 14.07.2026 15:52:15
CVE-Watchlists
Login
Unerledigt
Login

PAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL Fetching

A server-side request forgery (SSRF) vulnerability in the IKEv2 implementation of Palo Alto Networks PAN-OS® software allows an unauthenticated attacker to cause the firewall to send network requests to unintended destinations or cause a denial of service (DoS) condition.



Panorama, Cloud NGFW and Prisma® Access are not impacted by these vulnerabilities.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

NVD 172 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Paloaltonetworks ≫ Pan-os Version < 10.2.7

Paloaltonetworks ≫ Pan-os Version >= 10.2.8 < 10.2.10

Paloaltonetworks ≫ Pan-os Version >= 10.2.11 < 10.2.13

Paloaltonetworks ≫ Pan-os Version >= 10.2.14 < 10.2.16

Paloaltonetworks ≫ Pan-os Version10.2.7 Update-

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh1

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh10

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh11

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh12

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh13

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh14

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh15

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh16

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh17

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh18

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh19

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh2

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh20

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh21

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh22

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh23

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh24

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh3

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh32

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh4

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh5

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh6

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh7

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh8

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh9

Paloaltonetworks ≫ Pan-os Version10.2.10 Update-

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh1

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh10

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh11

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh12

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh13

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh14

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh17

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh18

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh2

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh21

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh27

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh3

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh30

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh31

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh4

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh5

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh6

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh7

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh8

Paloaltonetworks ≫ Pan-os Version10.2.13 Update-

Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh1

Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh10

Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh15

Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh16

Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh18

Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh2

Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh3

Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh4

Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh5

Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh7

Paloaltonetworks ≫ Pan-os Version10.2.16 Update-

Paloaltonetworks ≫ Pan-os Version10.2.16 Updateh1

Paloaltonetworks ≫ Pan-os Version10.2.16 Updateh4

Paloaltonetworks ≫ Pan-os Version10.2.16 Updateh6

Paloaltonetworks ≫ Pan-os Version10.2.17 Update-

Paloaltonetworks ≫ Pan-os Version10.2.18 Update-

Paloaltonetworks ≫ Pan-os Version10.2.18 Updateh1

Paloaltonetworks ≫ Pan-os Version10.2.18 Updateh5

Paloaltonetworks ≫ Pan-os Version >= 11.1.0 < 11.1.4

Paloaltonetworks ≫ Pan-os Version >= 11.1.5 < 11.1.6

Paloaltonetworks ≫ Pan-os Version >= 11.1.8 < 11.1.10

Paloaltonetworks ≫ Pan-os Version >= 11.1.11 < 11.1.13

Paloaltonetworks ≫ Pan-os Version11.1.4 Update-

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh1

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh10

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh11

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh12

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh13

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh15

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh16

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh17

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh18

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh2

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh25

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh27

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh3

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh32

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh4

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh5

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh6

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh7

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh8

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh9

Paloaltonetworks ≫ Pan-os Version11.1.6 Update-

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh1

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh10

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh14

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh17

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh18

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh19

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh2

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh20

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh21

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh22

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh23

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh25

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh29

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh3

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh4

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh5

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh6

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh7

Paloaltonetworks ≫ Pan-os Version11.1.7 Update-

Paloaltonetworks ≫ Pan-os Version11.1.7 Updateh1

Paloaltonetworks ≫ Pan-os Version11.1.7 Updateh2

Paloaltonetworks ≫ Pan-os Version11.1.7 Updateh4

Paloaltonetworks ≫ Pan-os Version11.1.10 Update-

Paloaltonetworks ≫ Pan-os Version11.1.10 Updateh1

Paloaltonetworks ≫ Pan-os Version11.1.10 Updateh10

Paloaltonetworks ≫ Pan-os Version11.1.10 Updateh12

Paloaltonetworks ≫ Pan-os Version11.1.10 Updateh21

Paloaltonetworks ≫ Pan-os Version11.1.10 Updateh4

Paloaltonetworks ≫ Pan-os Version11.1.10 Updateh5

Paloaltonetworks ≫ Pan-os Version11.1.10 Updateh7

Paloaltonetworks ≫ Pan-os Version11.1.10 Updateh9

Paloaltonetworks ≫ Pan-os Version11.1.13 Update-

Paloaltonetworks ≫ Pan-os Version11.1.13 Updateh1

Paloaltonetworks ≫ Pan-os Version11.1.13 Updateh2

Paloaltonetworks ≫ Pan-os Version11.1.13 Updateh3

Paloaltonetworks ≫ Pan-os Version11.1.14 Update-

Paloaltonetworks ≫ Pan-os Version >= 11.2.0 < 11.2.4

Paloaltonetworks ≫ Pan-os Version >= 11.2.5 < 11.2.7

Paloaltonetworks ≫ Pan-os Version >= 11.2.8 < 11.2.10

Paloaltonetworks ≫ Pan-os Version11.2.4 Update-

Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh1

Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh10

Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh11

Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh12

Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh14

Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh15

Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh2

Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh3

Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh4

Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh5

Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh6

Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh7

Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh8

Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh9

Paloaltonetworks ≫ Pan-os Version11.2.7 Update-

Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh1

Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh10

Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh11

Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh12

Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh2

Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh3

Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh4

Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh7

Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh8

Paloaltonetworks ≫ Pan-os Version11.2.10 Update-

Paloaltonetworks ≫ Pan-os Version11.2.10 Updateh1

Paloaltonetworks ≫ Pan-os Version11.2.10 Updateh2

Paloaltonetworks ≫ Pan-os Version11.2.10 Updateh3

Paloaltonetworks ≫ Pan-os Version11.2.10 Updateh4

Paloaltonetworks ≫ Pan-os Version11.2.10 Updateh5

Paloaltonetworks ≫ Pan-os Version11.2.11 Update-

Paloaltonetworks ≫ Pan-os Version >= 12.1.0 < 12.1.4

Paloaltonetworks ≫ Pan-os Version >= 12.1.5 < 12.1.7

Paloaltonetworks ≫ Pan-os Version12.1.4 Update-

Paloaltonetworks ≫ Pan-os Version12.1.4 Updateh2

Paloaltonetworks ≫ Pan-os Version12.1.4 Updateh3

Siemens ≫ Ruggedcom Ape1808 Firmware Version-

Siemens ≫ Ruggedcom Ape1808 Version-

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.33%	0.249

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.1	3.9	5.2	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
psirt@paloaltonetworks.com	4.8	0	0	CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:C/RE:H/U:Amber

CWE-918 Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

https://cert-portal.siemens.com/productcert/html/ssa-967325.html

Third Party Advisory

https://security.paloaltonetworks.com/CVE-2026-0258

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-0258

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-0258

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-0258

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-0258