CVE-2026-0258

EPSS 0.33%
Veröffentlicht 13.05.2026 18:08:36
Zuletzt bearbeitet 14.07.2026 15:52:15
Erkennungen
Login

PAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL Fetching

A server-side request forgery (SSRF) vulnerability in the IKEv2 implementation of Palo Alto Networks PAN-OS® software allows an unauthenticated attacker to cause the firewall to send network requests to unintended destinations or cause a denial of service (DoS) condition.



Panorama, Cloud NGFW and Prisma® Access are not impacted by these vulnerabilities.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

NVD 172 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Paloaltonetworks ≫ Pan-os Version < 10.2.7

Paloaltonetworks ≫ Pan-os Version >= 10.2.8 < 10.2.10

Paloaltonetworks ≫ Pan-os Version >= 10.2.11 < 10.2.13

Paloaltonetworks ≫ Pan-os Version >= 10.2.14 < 10.2.16

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update -

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h1

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h10

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h11

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h12

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h13

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h14

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h15

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h16

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h17

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h18

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h19

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h2

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h20

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h21

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h22

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h23

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h24

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h3

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h32

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h4

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h5

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h6

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h7

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h8

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h9

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update -

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h1

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h10

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h11

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h12

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h13

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h14

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h17

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h18

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h2

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h21

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h27

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h3

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h30

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h31

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h4

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h5

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h6

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h7

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h8

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update -

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h1

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h10

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h15

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h16

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h18

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h2

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h3

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h4

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h5

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h7

Paloaltonetworks ≫ Pan-os Version 10.2.16 Update -

Paloaltonetworks ≫ Pan-os Version 10.2.16 Update h1

Paloaltonetworks ≫ Pan-os Version 10.2.16 Update h4

Paloaltonetworks ≫ Pan-os Version 10.2.16 Update h6

Paloaltonetworks ≫ Pan-os Version 10.2.17 Update -

Paloaltonetworks ≫ Pan-os Version 10.2.18 Update -

Paloaltonetworks ≫ Pan-os Version 10.2.18 Update h1

Paloaltonetworks ≫ Pan-os Version 10.2.18 Update h5

Paloaltonetworks ≫ Pan-os Version >= 11.1.0 < 11.1.4

Paloaltonetworks ≫ Pan-os Version >= 11.1.5 < 11.1.6

Paloaltonetworks ≫ Pan-os Version >= 11.1.8 < 11.1.10

Paloaltonetworks ≫ Pan-os Version >= 11.1.11 < 11.1.13

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update -

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h1

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h10

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h11

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h12

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h13

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h15

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h16

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h17

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h18

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h2

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h25

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h27

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h3

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h32

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h4

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h5

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h6

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h7

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h8

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h9

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update -

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h1

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h10

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h14

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h17

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h18

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h19

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h2

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h20

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h21

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h22

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h23

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h25

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h29

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h3

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h4

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h5

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h6

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h7

Paloaltonetworks ≫ Pan-os Version 11.1.7 Update -

Paloaltonetworks ≫ Pan-os Version 11.1.7 Update h1

Paloaltonetworks ≫ Pan-os Version 11.1.7 Update h2

Paloaltonetworks ≫ Pan-os Version 11.1.7 Update h4

Paloaltonetworks ≫ Pan-os Version 11.1.10 Update -

Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h1

Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h10

Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h12

Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h21

Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h4

Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h5

Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h7

Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h9

Paloaltonetworks ≫ Pan-os Version 11.1.13 Update -

Paloaltonetworks ≫ Pan-os Version 11.1.13 Update h1

Paloaltonetworks ≫ Pan-os Version 11.1.13 Update h2

Paloaltonetworks ≫ Pan-os Version 11.1.13 Update h3

Paloaltonetworks ≫ Pan-os Version 11.1.14 Update -

Paloaltonetworks ≫ Pan-os Version >= 11.2.0 < 11.2.4

Paloaltonetworks ≫ Pan-os Version >= 11.2.5 < 11.2.7

Paloaltonetworks ≫ Pan-os Version >= 11.2.8 < 11.2.10

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update -

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h1

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h10

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h11

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h12

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h14

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h15

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h2

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h3

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h4

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h5

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h6

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h7

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h8

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h9

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update -

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h1

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h10

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h11

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h12

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h2

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h3

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h4

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h7

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h8

Paloaltonetworks ≫ Pan-os Version 11.2.10 Update -

Paloaltonetworks ≫ Pan-os Version 11.2.10 Update h1

Paloaltonetworks ≫ Pan-os Version 11.2.10 Update h2

Paloaltonetworks ≫ Pan-os Version 11.2.10 Update h3

Paloaltonetworks ≫ Pan-os Version 11.2.10 Update h4

Paloaltonetworks ≫ Pan-os Version 11.2.10 Update h5

Paloaltonetworks ≫ Pan-os Version 11.2.11 Update -

Paloaltonetworks ≫ Pan-os Version >= 12.1.0 < 12.1.4

Paloaltonetworks ≫ Pan-os Version >= 12.1.5 < 12.1.7

Paloaltonetworks ≫ Pan-os Version 12.1.4 Update -

Paloaltonetworks ≫ Pan-os Version 12.1.4 Update h2

Paloaltonetworks ≫ Pan-os Version 12.1.4 Update h3

Siemens ≫ Ruggedcom Ape1808 Firmware Version -

Siemens ≫ Ruggedcom Ape1808 Version -

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.33%	0.249

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.1	3.9	5.2	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
psirt@paloaltonetworks.com	4.8	0	0	CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:C/RE:H/U:Amber

CWE-918 Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

https://cert-portal.siemens.com/productcert/html/ssa-967325.html

Third Party Advisory

https://security.paloaltonetworks.com/CVE-2026-0258

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-0258

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-0258

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-0258

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-0258