CVE-2026-0258

CRITICALCVSS 9.10% EPSS

A server-side request forgery (SSRF) vulnerability in the IKEv2 implementation of Palo Alto Networks PAN-OS® software allows an unauthenticated attacker to cause the firewall to send network requests to unintended destinations or cause a denial of service (DoS) condition. Panorama, Cloud NGFW and Prisma® Access are not impacted by these vulnerabilities.

Published 2026-05-13 · last modified 2026-07-14

Affected products

VendorProduct
paloaltonetworkspan-os
siemensruggedcom_ape1808_firmware

Full record at NVD ↗

← Get alerted the moment a CVE hits your gear — subscribe free

Ncerio by BeyondNets · data from NVD, CISA KEV, EPSS.