CVE-2026-0285

Medienbericht

EPSS 0.23%
Veröffentlicht 09.07.2026 18:58:14
Zuletzt bearbeitet 11.08.2026 13:17:53
Erkennungen
Login

PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface

A server-side request forgery (SSRF) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator with network access to the management web interface to make unauthorized requests from the firewall to internal services.



The security risk posed by this issue is minimized when the management interface is restricted to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . 

Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

NVD 203 VulnDex Vulnerability Enrichment 2

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Paloaltonetworks ≫ Pan-os Version >= 10.2.0 < 10.2.7

Paloaltonetworks ≫ Pan-os Version >= 10.2.8 < 10.2.10

Paloaltonetworks ≫ Pan-os Version >= 10.2.11 < 10.2.13

Paloaltonetworks ≫ Pan-os Version >= 10.2.14 < 10.2.16

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update -

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h1

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h10

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h11

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h12

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h13

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h14

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h15

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h16

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h17

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h18

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h19

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h2

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h20

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h21

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h22

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h23

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h24

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h3

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h32

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h34

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h35

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h4

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h5

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h6

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h7

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h8

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h9

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update -

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h1

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h10

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h11

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h12

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h13

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h14

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h17

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h18

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h2

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h21

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h27

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h3

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h30

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h31

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h36

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h37

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h4

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h5

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h6

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h7

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update -

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h1

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h10

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h15

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h16

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h18

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h2

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h21

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h22

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h3

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h4

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h5

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h7

Paloaltonetworks ≫ Pan-os Version 10.2.16 Update -

Paloaltonetworks ≫ Pan-os Version 10.2.16 Update h1

Paloaltonetworks ≫ Pan-os Version 10.2.16 Update h4

Paloaltonetworks ≫ Pan-os Version 10.2.16 Update h6

Paloaltonetworks ≫ Pan-os Version 10.2.16 Update h7

Paloaltonetworks ≫ Pan-os Version 10.2.16 Update h8

Paloaltonetworks ≫ Pan-os Version 10.2.17

Paloaltonetworks ≫ Pan-os Version 10.2.18 Update h1

Paloaltonetworks ≫ Pan-os Version 10.2.18 Update h5

Paloaltonetworks ≫ Pan-os Version 10.2.18 Update h6

Paloaltonetworks ≫ Pan-os Version 10.2.18 Update h7

Paloaltonetworks ≫ Pan-os Version >= 11.1.0 < 11.1.4

Paloaltonetworks ≫ Pan-os Version >= 11.1.8 < 11.1.10

Paloaltonetworks ≫ Pan-os Version >= 11.1.11 < 11.1.13

Paloaltonetworks ≫ Pan-os Version >= 11.1.14 < 11.1.16

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update -

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h1

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h10

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h11

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h12

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h13

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h15

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h17

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h18

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h2

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h25

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h27

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h3

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h32

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h33

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h34

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h4

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h5

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h6

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h7

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h8

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h9

Paloaltonetworks ≫ Pan-os Version 11.1.5

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update -

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h1

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h10

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h14

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h17

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h18

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h19

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h2

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h20

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h21

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h22

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h23

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h25

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h29

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h3

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h32

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h33

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h34

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h4

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h6

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h7

Paloaltonetworks ≫ Pan-os Version 11.1.10 Update -

Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h1

Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h10

Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h12

Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h21

Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h25

Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h26

Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h27

Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h28

Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h4

Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h5

Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h7

Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h9

Paloaltonetworks ≫ Pan-os Version 11.1.13 Update -

Paloaltonetworks ≫ Pan-os Version 11.1.13 Update h1

Paloaltonetworks ≫ Pan-os Version 11.1.13 Update h2

Paloaltonetworks ≫ Pan-os Version 11.1.13 Update h3

Paloaltonetworks ≫ Pan-os Version 11.1.13 Update h5

Paloaltonetworks ≫ Pan-os Version 11.1.13 Update h6

Paloaltonetworks ≫ Pan-os Version 11.1.13 Update h7

Paloaltonetworks ≫ Pan-os Version 11.1.13 Update h8

Paloaltonetworks ≫ Pan-os Version >= 11.2.0 < 11.2.4

Paloaltonetworks ≫ Pan-os Version >= 11.2.5 < 11.2.7

Paloaltonetworks ≫ Pan-os Version >= 11.2.8 < 11.2.10

Paloaltonetworks ≫ Pan-os Version >= 11.2.11 < 11.2.13

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update -

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h1

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h10

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h11

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h12

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h14

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h15

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h17

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h18

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h2

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h3

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h4

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h5

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h6

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h7

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h8

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h9

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update -

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h1

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h10

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h11

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h12

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h13

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h14

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h15

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h16

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h17

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h2

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h3

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h4

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h7

Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h8

Paloaltonetworks ≫ Pan-os Version 11.2.10 Update -

Paloaltonetworks ≫ Pan-os Version 11.2.10 Update h1

Paloaltonetworks ≫ Pan-os Version 11.2.10 Update h10

Paloaltonetworks ≫ Pan-os Version 11.2.10 Update h2

Paloaltonetworks ≫ Pan-os Version 11.2.10 Update h3

Paloaltonetworks ≫ Pan-os Version 11.2.10 Update h4

Paloaltonetworks ≫ Pan-os Version 11.2.10 Update h5

Paloaltonetworks ≫ Pan-os Version 11.2.10 Update h6

Paloaltonetworks ≫ Pan-os Version 11.2.10 Update h7

Paloaltonetworks ≫ Pan-os Version 11.2.10 Update h8

Paloaltonetworks ≫ Pan-os Version 11.2.10 Update h9

Paloaltonetworks ≫ Pan-os Version >= 12.1.2 < 12.1.4

Paloaltonetworks ≫ Pan-os Version >= 12.1.5 < 12.1.7

Paloaltonetworks ≫ Pan-os Version 12.1.4 Update -

Paloaltonetworks ≫ Pan-os Version 12.1.4 Update h2

Paloaltonetworks ≫ Pan-os Version 12.1.4 Update h3

Paloaltonetworks ≫ Pan-os Version 12.1.4 Update h5

Paloaltonetworks ≫ Pan-os Version 12.1.4 Update h6

Paloaltonetworks ≫ Pan-os Version 12.1.4 Update h7

Paloaltonetworks ≫ Pan-os Version 12.1.7 Update -

Paloaltonetworks ≫ Pan-os Version 12.1.7 Update h1

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.23%	0.138

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	4.9	1.2	3.6	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
psirt@paloaltonetworks.com	4.7	0	0	CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber

CWE-918 Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.

VulnDex Intel

Media Report

22.07.2026 16:31

https://security.paloaltonetworks.com/CVE-2026-0285

Vendor Advisory

https://cert-portal.siemens.com/productcert/html/ssa-104023.html

https://nvd.nist.gov/vuln/detail/CVE-2026-0285

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-0285

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-0285

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-0285