CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.1. It affects Palo Alto, PAN-OS. Exploitation may require the attacker to be authenticated. It may lead to a denial-of-service condition.
CVE
CVE-2026-0258
Severity
CRITICAL
CVSS
9.1
EPSS
0.33%
Palo Alto PAN-OS
Original NVD Description
A server-side request forgery (SSRF) vulnerability in the IKEv2 implementation of Palo Alto Networks PAN-OS® software allows an unauthenticated attacker to cause the firewall to send network requests to unintended destinations or cause a denial of service (DoS) condition. Panorama, Cloud NGFW and Prisma® Access are not impacted by these vulnerabilities.
Related CVEs
Other vulnerabilities affecting the same vendor(s)