CVE-2026-0285

Medienbericht

EPSS 0.23%
Veröffentlicht 09.07.2026 18:58:14
Zuletzt bearbeitet 11.08.2026 13:17:53
CVE-Watchlists
Login
Unerledigt
Login

PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface

A server-side request forgery (SSRF) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator with network access to the management web interface to make unauthorized requests from the firewall to internal services.



The security risk posed by this issue is minimized when the management interface is restricted to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . 

Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

NVD 203 VulnDex Vulnerability Enrichment 2

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Paloaltonetworks ≫ Pan-os Version >= 10.2.0 < 10.2.7

Paloaltonetworks ≫ Pan-os Version >= 10.2.8 < 10.2.10

Paloaltonetworks ≫ Pan-os Version >= 10.2.11 < 10.2.13

Paloaltonetworks ≫ Pan-os Version >= 10.2.14 < 10.2.16

Paloaltonetworks ≫ Pan-os Version10.2.7 Update-

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh1

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh10

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh11

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh12

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh13

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh14

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh15

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh16

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh17

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh18

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh19

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh2

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh20

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh21

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh22

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh23

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh24

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh3

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh32

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh34

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh35

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh4

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh5

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh6

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh7

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh8

Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh9

Paloaltonetworks ≫ Pan-os Version10.2.10 Update-

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh1

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh10

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh11

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh12

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh13

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh14

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh17

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh18

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh2

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh21

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh27

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh3

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh30

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh31

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh36

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh37

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh4

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh5

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh6

Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh7

Paloaltonetworks ≫ Pan-os Version10.2.13 Update-

Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh1

Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh10

Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh15

Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh16

Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh18

Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh2

Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh21

Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh22

Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh3

Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh4

Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh5

Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh7

Paloaltonetworks ≫ Pan-os Version10.2.16 Update-

Paloaltonetworks ≫ Pan-os Version10.2.16 Updateh1

Paloaltonetworks ≫ Pan-os Version10.2.16 Updateh4

Paloaltonetworks ≫ Pan-os Version10.2.16 Updateh6

Paloaltonetworks ≫ Pan-os Version10.2.16 Updateh7

Paloaltonetworks ≫ Pan-os Version10.2.16 Updateh8

Paloaltonetworks ≫ Pan-os Version10.2.17

Paloaltonetworks ≫ Pan-os Version10.2.18 Updateh1

Paloaltonetworks ≫ Pan-os Version10.2.18 Updateh5

Paloaltonetworks ≫ Pan-os Version10.2.18 Updateh6

Paloaltonetworks ≫ Pan-os Version10.2.18 Updateh7

Paloaltonetworks ≫ Pan-os Version >= 11.1.0 < 11.1.4

Paloaltonetworks ≫ Pan-os Version >= 11.1.8 < 11.1.10

Paloaltonetworks ≫ Pan-os Version >= 11.1.11 < 11.1.13

Paloaltonetworks ≫ Pan-os Version >= 11.1.14 < 11.1.16

Paloaltonetworks ≫ Pan-os Version11.1.4 Update-

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh1

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh10

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh11

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh12

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh13

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh15

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh17

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh18

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh2

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh25

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh27

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh3

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh32

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh33

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh34

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh4

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh5

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh6

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh7

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh8

Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh9

Paloaltonetworks ≫ Pan-os Version11.1.5

Paloaltonetworks ≫ Pan-os Version11.1.6 Update-

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh1

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh10

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh14

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh17

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh18

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh19

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh2

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh20

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh21

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh22

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh23

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh25

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh29

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh3

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh32

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh33

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh34

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh4

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh6

Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh7

Paloaltonetworks ≫ Pan-os Version11.1.10 Update-

Paloaltonetworks ≫ Pan-os Version11.1.10 Updateh1

Paloaltonetworks ≫ Pan-os Version11.1.10 Updateh10

Paloaltonetworks ≫ Pan-os Version11.1.10 Updateh12

Paloaltonetworks ≫ Pan-os Version11.1.10 Updateh21

Paloaltonetworks ≫ Pan-os Version11.1.10 Updateh25

Paloaltonetworks ≫ Pan-os Version11.1.10 Updateh26

Paloaltonetworks ≫ Pan-os Version11.1.10 Updateh27

Paloaltonetworks ≫ Pan-os Version11.1.10 Updateh28

Paloaltonetworks ≫ Pan-os Version11.1.10 Updateh4

Paloaltonetworks ≫ Pan-os Version11.1.10 Updateh5

Paloaltonetworks ≫ Pan-os Version11.1.10 Updateh7

Paloaltonetworks ≫ Pan-os Version11.1.10 Updateh9

Paloaltonetworks ≫ Pan-os Version11.1.13 Update-

Paloaltonetworks ≫ Pan-os Version11.1.13 Updateh1

Paloaltonetworks ≫ Pan-os Version11.1.13 Updateh2

Paloaltonetworks ≫ Pan-os Version11.1.13 Updateh3

Paloaltonetworks ≫ Pan-os Version11.1.13 Updateh5

Paloaltonetworks ≫ Pan-os Version11.1.13 Updateh6

Paloaltonetworks ≫ Pan-os Version11.1.13 Updateh7

Paloaltonetworks ≫ Pan-os Version11.1.13 Updateh8

Paloaltonetworks ≫ Pan-os Version >= 11.2.0 < 11.2.4

Paloaltonetworks ≫ Pan-os Version >= 11.2.5 < 11.2.7

Paloaltonetworks ≫ Pan-os Version >= 11.2.8 < 11.2.10

Paloaltonetworks ≫ Pan-os Version >= 11.2.11 < 11.2.13

Paloaltonetworks ≫ Pan-os Version11.2.4 Update-

Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh1

Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh10

Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh11

Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh12

Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh14

Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh15

Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh17

Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh18

Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh2

Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh3

Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh4

Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh5

Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh6

Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh7

Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh8

Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh9

Paloaltonetworks ≫ Pan-os Version11.2.7 Update-

Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh1

Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh10

Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh11

Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh12

Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh13

Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh14

Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh15

Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh16

Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh17

Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh2

Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh3

Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh4

Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh7

Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh8

Paloaltonetworks ≫ Pan-os Version11.2.10 Update-

Paloaltonetworks ≫ Pan-os Version11.2.10 Updateh1

Paloaltonetworks ≫ Pan-os Version11.2.10 Updateh10

Paloaltonetworks ≫ Pan-os Version11.2.10 Updateh2

Paloaltonetworks ≫ Pan-os Version11.2.10 Updateh3

Paloaltonetworks ≫ Pan-os Version11.2.10 Updateh4

Paloaltonetworks ≫ Pan-os Version11.2.10 Updateh5

Paloaltonetworks ≫ Pan-os Version11.2.10 Updateh6

Paloaltonetworks ≫ Pan-os Version11.2.10 Updateh7

Paloaltonetworks ≫ Pan-os Version11.2.10 Updateh8

Paloaltonetworks ≫ Pan-os Version11.2.10 Updateh9

Paloaltonetworks ≫ Pan-os Version >= 12.1.2 < 12.1.4

Paloaltonetworks ≫ Pan-os Version >= 12.1.5 < 12.1.7

Paloaltonetworks ≫ Pan-os Version12.1.4 Update-

Paloaltonetworks ≫ Pan-os Version12.1.4 Updateh2

Paloaltonetworks ≫ Pan-os Version12.1.4 Updateh3

Paloaltonetworks ≫ Pan-os Version12.1.4 Updateh5

Paloaltonetworks ≫ Pan-os Version12.1.4 Updateh6

Paloaltonetworks ≫ Pan-os Version12.1.4 Updateh7

Paloaltonetworks ≫ Pan-os Version12.1.7 Update-

Paloaltonetworks ≫ Pan-os Version12.1.7 Updateh1

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.23%	0.138

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	4.9	1.2	3.6	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
psirt@paloaltonetworks.com	4.7	0	0	CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber

CWE-918 Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.

VulnDex Intel

Media Report

22.07.2026 16:31

https://security.paloaltonetworks.com/CVE-2026-0285

Vendor Advisory

https://cert-portal.siemens.com/productcert/html/ssa-104023.html

https://nvd.nist.gov/vuln/detail/CVE-2026-0285

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-0285

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-0285

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-0285