CVEvulnerability

CVE-2026-0285

4.7 MEDIUM Published 2026-07-09 Modified 2026-10-25 Official page ↗
Status
Modified
Published
2026-07-09
Last modified
2026-10-25
Assigner
[email protected]
CVSS 4.0 ([email protected])
4.7 MEDIUM — CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber
CVSS 3.1 ([email protected])
4.9 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-918

Description

A server-side request forgery (SSRF) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator with network access to the management web interface to make unauthorized requests from the firewall to internal services. The security risk posed by this issue is minimized when the management interface is restricted to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .  Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.

Affected configurations

• paloaltonetworks pan-os (>= 10.2.0 < 10.2.7) • paloaltonetworks pan-os (>= 10.2.8 < 10.2.10) • paloaltonetworks pan-os (>= 10.2.11 < 10.2.13) • paloaltonetworks pan-os (>= 10.2.14 < 10.2.16) • paloaltonetworks pan-os 10.2.7 • paloaltonetworks pan-os 10.2.10 • paloaltonetworks pan-os 10.2.13 • paloaltonetworks pan-os 10.2.16 • paloaltonetworks pan-os 10.2.17 • paloaltonetworks pan-os 10.2.18 • paloaltonetworks pan-os (>= 11.1.0 < 11.1.4) • paloaltonetworks pan-os (>= 11.1.8 < 11.1.10) • paloaltonetworks pan-os (>= 11.1.11 < 11.1.13) • paloaltonetworks pan-os (>= 11.1.14 < 11.1.16) • paloaltonetworks pan-os 11.1.4 • paloaltonetworks pan-os 11.1.5 • paloaltonetworks pan-os 11.1.6 • paloaltonetworks pan-os 11.1.10 • paloaltonetworks pan-os 11.1.13 • paloaltonetworks pan-os (>= 11.2.0 < 11.2.4) • paloaltonetworks pan-os (>= 11.2.5 < 11.2.7) • paloaltonetworks pan-os (>= 11.2.8 < 11.2.10) • paloaltonetworks pan-os (>= 11.2.11 < 11.2.13) • paloaltonetworks pan-os 11.2.4 • paloaltonetworks pan-os 11.2.7 • paloaltonetworks pan-os 11.2.10 • paloaltonetworks pan-os (>= 12.1.2 < 12.1.4) • paloaltonetworks pan-os (>= 12.1.5 < 12.1.7) • paloaltonetworks pan-os 12.1.4 • paloaltonetworks pan-os 12.1.7

Related

Weakness · CWE (1)

  • CWE-918 Server-Side Request Forgery weakness

References