CVE-2026-0258
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
An SSRF vulnerability in the IKEv2 implementation of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to cause the firewall to send network requests to unintended destinations or cause a DoS condition.
Risk Assessment
An attacker can use the firewall to scan internal networks or attack other systems, and also cause a denial of service, impacting network availability.
Recommendation
Immediately apply security patches provided by Palo Alto Networks for PAN-OS and restrict access to management interfaces and IKEv2 to trusted sources only.
Original NVD description (English source)
A server-side request forgery (SSRF) vulnerability in the IKEv2 implementation of Palo Alto Networks PAN-OS® software allows an unauthenticated attacker to cause the firewall to send network requests to unintended destinations or cause a denial of service (DoS) condition. Panorama, Cloud NGFW and Prisma® Access are not impacted by these vulnerabilities.