CVE-2026-0244

HighCVSS 8.1

Published: 13/05/2026(UTC)Updated: 14/07/2026(UTC)Translated: 15/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.11%

1th percentile - higher than 1% of all known CVEs

Summary

An improper certificate validation vulnerability in Palo Alto Networks Prisma SD-WAN ION allows a man-in-the-middle (MitM) attacker to impersonate the controller.

Risk Assessment

An attacker can intercept and modify network traffic between the ION device and the controller, leading to data confidentiality and integrity breaches and potential device takeover.

Recommendation

Immediately update the Prisma SD-WAN ION software to a patched version and implement connection integrity monitoring mechanisms.

Other vulnerabilities in Prisma SD-WAN ION

CVE-2026-0243Medium
A DoS vulnerability in Palo Alto Networks Prisma SD-WAN ION devices allows an unauthenticated attacker in a network adjacent to the device to cause system disruption by sending a specially crafted IPv6 packet.

Original NVD description (English source)

An improper certificate validation vulnerability in the Palo Alto Networks Prisma SD-WAN ION enables man-in-the-middle (MitM) attacker to impersonate the controller.