CVE-2026-0285
EUVD-2026-4267609.07.2026, 19:17
A server-side request forgery (SSRF) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator with network access to the management web interface to make unauthorized requests from the firewall to internal services. The security risk posed by this issue is minimized when the management interface is restricted to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| paloaltonetworks | pan-os | 10.2.0 ≤ 𝑥 < 10.2.7 |
| paloaltonetworks | pan-os | 10.2.8 ≤ 𝑥 < 10.2.10 |
| paloaltonetworks | pan-os | 10.2.11 ≤ 𝑥 < 10.2.13 |
| paloaltonetworks | pan-os | 10.2.14 ≤ 𝑥 < 10.2.16 |
| paloaltonetworks | pan-os | 10.2.7 |
| paloaltonetworks | pan-os | 10.2.7:h1 |
| paloaltonetworks | pan-os | 10.2.7:h10 |
| paloaltonetworks | pan-os | 10.2.7:h11 |
| paloaltonetworks | pan-os | 10.2.7:h12 |
| paloaltonetworks | pan-os | 10.2.7:h13 |
| paloaltonetworks | pan-os | 10.2.7:h14 |
| paloaltonetworks | pan-os | 10.2.7:h15 |
| paloaltonetworks | pan-os | 10.2.7:h16 |
| paloaltonetworks | pan-os | 10.2.7:h17 |
| paloaltonetworks | pan-os | 10.2.7:h18 |
| paloaltonetworks | pan-os | 10.2.7:h19 |
| paloaltonetworks | pan-os | 10.2.7:h2 |
| paloaltonetworks | pan-os | 10.2.7:h20 |
| paloaltonetworks | pan-os | 10.2.7:h21 |
| paloaltonetworks | pan-os | 10.2.7:h22 |
| paloaltonetworks | pan-os | 10.2.7:h23 |
| paloaltonetworks | pan-os | 10.2.7:h24 |
| paloaltonetworks | pan-os | 10.2.7:h3 |
| paloaltonetworks | pan-os | 10.2.7:h32 |
| paloaltonetworks | pan-os | 10.2.7:h34 |
| paloaltonetworks | pan-os | 10.2.7:h35 |
| paloaltonetworks | pan-os | 10.2.7:h4 |
| paloaltonetworks | pan-os | 10.2.7:h5 |
| paloaltonetworks | pan-os | 10.2.7:h6 |
| paloaltonetworks | pan-os | 10.2.7:h7 |
| paloaltonetworks | pan-os | 10.2.7:h8 |
| paloaltonetworks | pan-os | 10.2.7:h9 |
| paloaltonetworks | pan-os | 10.2.10 |
| paloaltonetworks | pan-os | 10.2.10:h1 |
| paloaltonetworks | pan-os | 10.2.10:h10 |
| paloaltonetworks | pan-os | 10.2.10:h11 |
| paloaltonetworks | pan-os | 10.2.10:h12 |
| paloaltonetworks | pan-os | 10.2.10:h13 |
| paloaltonetworks | pan-os | 10.2.10:h14 |
| paloaltonetworks | pan-os | 10.2.10:h17 |
| paloaltonetworks | pan-os | 10.2.10:h18 |
| paloaltonetworks | pan-os | 10.2.10:h2 |
| paloaltonetworks | pan-os | 10.2.10:h21 |
| paloaltonetworks | pan-os | 10.2.10:h27 |
| paloaltonetworks | pan-os | 10.2.10:h3 |
| paloaltonetworks | pan-os | 10.2.10:h30 |
| paloaltonetworks | pan-os | 10.2.10:h31 |
| paloaltonetworks | pan-os | 10.2.10:h36 |
| paloaltonetworks | pan-os | 10.2.10:h37 |
| paloaltonetworks | pan-os | 10.2.10:h4 |
| paloaltonetworks | pan-os | 10.2.10:h5 |
| paloaltonetworks | pan-os | 10.2.10:h6 |
| paloaltonetworks | pan-os | 10.2.10:h7 |
| paloaltonetworks | pan-os | 10.2.13 |
| paloaltonetworks | pan-os | 10.2.13:h1 |
| paloaltonetworks | pan-os | 10.2.13:h10 |
| paloaltonetworks | pan-os | 10.2.13:h15 |
| paloaltonetworks | pan-os | 10.2.13:h16 |
| paloaltonetworks | pan-os | 10.2.13:h18 |
| paloaltonetworks | pan-os | 10.2.13:h2 |
| paloaltonetworks | pan-os | 10.2.13:h21 |
| paloaltonetworks | pan-os | 10.2.13:h22 |
| paloaltonetworks | pan-os | 10.2.13:h3 |
| paloaltonetworks | pan-os | 10.2.13:h4 |
| paloaltonetworks | pan-os | 10.2.13:h5 |
| paloaltonetworks | pan-os | 10.2.13:h7 |
| paloaltonetworks | pan-os | 10.2.16 |
| paloaltonetworks | pan-os | 10.2.16:h1 |
| paloaltonetworks | pan-os | 10.2.16:h4 |
| paloaltonetworks | pan-os | 10.2.16:h6 |
| paloaltonetworks | pan-os | 10.2.16:h7 |
| paloaltonetworks | pan-os | 10.2.16:h8 |
| paloaltonetworks | pan-os | 10.2.17 |
| paloaltonetworks | pan-os | 10.2.18:h1 |
| paloaltonetworks | pan-os | 10.2.18:h5 |
| paloaltonetworks | pan-os | 10.2.18:h6 |
| paloaltonetworks | pan-os | 10.2.18:h7 |
| paloaltonetworks | pan-os | 11.1.0 ≤ 𝑥 < 11.1.4 |
| paloaltonetworks | pan-os | 11.1.8 ≤ 𝑥 < 11.1.10 |
| paloaltonetworks | pan-os | 11.1.11 ≤ 𝑥 < 11.1.13 |
| paloaltonetworks | pan-os | 11.1.14 ≤ 𝑥 < 11.1.16 |
| paloaltonetworks | pan-os | 11.1.4 |
| paloaltonetworks | pan-os | 11.1.4:h1 |
| paloaltonetworks | pan-os | 11.1.4:h10 |
| paloaltonetworks | pan-os | 11.1.4:h11 |
| paloaltonetworks | pan-os | 11.1.4:h12 |
| paloaltonetworks | pan-os | 11.1.4:h13 |
| paloaltonetworks | pan-os | 11.1.4:h15 |
| paloaltonetworks | pan-os | 11.1.4:h17 |
| paloaltonetworks | pan-os | 11.1.4:h18 |
| paloaltonetworks | pan-os | 11.1.4:h2 |
| paloaltonetworks | pan-os | 11.1.4:h25 |
| paloaltonetworks | pan-os | 11.1.4:h27 |
| paloaltonetworks | pan-os | 11.1.4:h3 |
| paloaltonetworks | pan-os | 11.1.4:h32 |
| paloaltonetworks | pan-os | 11.1.4:h33 |
| paloaltonetworks | pan-os | 11.1.4:h34 |
| paloaltonetworks | pan-os | 11.1.4:h4 |
| paloaltonetworks | pan-os | 11.1.4:h5 |
| paloaltonetworks | pan-os | 11.1.4:h6 |
| paloaltonetworks | pan-os | 11.1.4:h7 |
| paloaltonetworks | pan-os | 11.1.4:h8 |
| paloaltonetworks | pan-os | 11.1.4:h9 |
| paloaltonetworks | pan-os | 11.1.5 |
| paloaltonetworks | pan-os | 11.1.6 |
| paloaltonetworks | pan-os | 11.1.6:h1 |
| paloaltonetworks | pan-os | 11.1.6:h10 |
| paloaltonetworks | pan-os | 11.1.6:h14 |
| paloaltonetworks | pan-os | 11.1.6:h17 |
| paloaltonetworks | pan-os | 11.1.6:h18 |
| paloaltonetworks | pan-os | 11.1.6:h19 |
| paloaltonetworks | pan-os | 11.1.6:h2 |
| paloaltonetworks | pan-os | 11.1.6:h20 |
| paloaltonetworks | pan-os | 11.1.6:h21 |
| paloaltonetworks | pan-os | 11.1.6:h22 |
| paloaltonetworks | pan-os | 11.1.6:h23 |
| paloaltonetworks | pan-os | 11.1.6:h25 |
| paloaltonetworks | pan-os | 11.1.6:h29 |
| paloaltonetworks | pan-os | 11.1.6:h3 |
| paloaltonetworks | pan-os | 11.1.6:h32 |
| paloaltonetworks | pan-os | 11.1.6:h33 |
| paloaltonetworks | pan-os | 11.1.6:h34 |
| paloaltonetworks | pan-os | 11.1.6:h4 |
| paloaltonetworks | pan-os | 11.1.6:h6 |
| paloaltonetworks | pan-os | 11.1.6:h7 |
| paloaltonetworks | pan-os | 11.1.10 |
| paloaltonetworks | pan-os | 11.1.10:h1 |
| paloaltonetworks | pan-os | 11.1.10:h10 |
| paloaltonetworks | pan-os | 11.1.10:h12 |
| paloaltonetworks | pan-os | 11.1.10:h21 |
| paloaltonetworks | pan-os | 11.1.10:h25 |
| paloaltonetworks | pan-os | 11.1.10:h26 |
| paloaltonetworks | pan-os | 11.1.10:h27 |
| paloaltonetworks | pan-os | 11.1.10:h28 |
| paloaltonetworks | pan-os | 11.1.10:h4 |
| paloaltonetworks | pan-os | 11.1.10:h5 |
| paloaltonetworks | pan-os | 11.1.10:h7 |
| paloaltonetworks | pan-os | 11.1.10:h9 |
| paloaltonetworks | pan-os | 11.1.13 |
| paloaltonetworks | pan-os | 11.1.13:h1 |
| paloaltonetworks | pan-os | 11.1.13:h2 |
| paloaltonetworks | pan-os | 11.1.13:h3 |
| paloaltonetworks | pan-os | 11.1.13:h5 |
| paloaltonetworks | pan-os | 11.1.13:h6 |
| paloaltonetworks | pan-os | 11.1.13:h7 |
| paloaltonetworks | pan-os | 11.1.13:h8 |
| paloaltonetworks | pan-os | 11.2.0 ≤ 𝑥 < 11.2.4 |
| paloaltonetworks | pan-os | 11.2.5 ≤ 𝑥 < 11.2.7 |
| paloaltonetworks | pan-os | 11.2.8 ≤ 𝑥 < 11.2.10 |
| paloaltonetworks | pan-os | 11.2.11 ≤ 𝑥 < 11.2.13 |
| paloaltonetworks | pan-os | 11.2.4 |
| paloaltonetworks | pan-os | 11.2.4:h1 |
| paloaltonetworks | pan-os | 11.2.4:h10 |
| paloaltonetworks | pan-os | 11.2.4:h11 |
| paloaltonetworks | pan-os | 11.2.4:h12 |
| paloaltonetworks | pan-os | 11.2.4:h14 |
| paloaltonetworks | pan-os | 11.2.4:h15 |
| paloaltonetworks | pan-os | 11.2.4:h17 |
| paloaltonetworks | pan-os | 11.2.4:h18 |
| paloaltonetworks | pan-os | 11.2.4:h2 |
| paloaltonetworks | pan-os | 11.2.4:h3 |
| paloaltonetworks | pan-os | 11.2.4:h4 |
| paloaltonetworks | pan-os | 11.2.4:h5 |
| paloaltonetworks | pan-os | 11.2.4:h6 |
| paloaltonetworks | pan-os | 11.2.4:h7 |
| paloaltonetworks | pan-os | 11.2.4:h8 |
| paloaltonetworks | pan-os | 11.2.4:h9 |
| paloaltonetworks | pan-os | 11.2.7 |
| paloaltonetworks | pan-os | 11.2.7:h1 |
| paloaltonetworks | pan-os | 11.2.7:h10 |
| paloaltonetworks | pan-os | 11.2.7:h11 |
| paloaltonetworks | pan-os | 11.2.7:h12 |
| paloaltonetworks | pan-os | 11.2.7:h13 |
| paloaltonetworks | pan-os | 11.2.7:h14 |
| paloaltonetworks | pan-os | 11.2.7:h15 |
| paloaltonetworks | pan-os | 11.2.7:h16 |
| paloaltonetworks | pan-os | 11.2.7:h17 |
| paloaltonetworks | pan-os | 11.2.7:h2 |
| paloaltonetworks | pan-os | 11.2.7:h3 |
| paloaltonetworks | pan-os | 11.2.7:h4 |
| paloaltonetworks | pan-os | 11.2.7:h7 |
| paloaltonetworks | pan-os | 11.2.7:h8 |
| paloaltonetworks | pan-os | 11.2.10 |
| paloaltonetworks | pan-os | 11.2.10:h1 |
| paloaltonetworks | pan-os | 11.2.10:h10 |
| paloaltonetworks | pan-os | 11.2.10:h2 |
| paloaltonetworks | pan-os | 11.2.10:h3 |
| paloaltonetworks | pan-os | 11.2.10:h4 |
| paloaltonetworks | pan-os | 11.2.10:h5 |
| paloaltonetworks | pan-os | 11.2.10:h6 |
| paloaltonetworks | pan-os | 11.2.10:h7 |
| paloaltonetworks | pan-os | 11.2.10:h8 |
| paloaltonetworks | pan-os | 11.2.10:h9 |
| paloaltonetworks | pan-os | 12.1.2 ≤ 𝑥 < 12.1.4 |
| paloaltonetworks | pan-os | 12.1.5 ≤ 𝑥 < 12.1.7 |
| paloaltonetworks | pan-os | 12.1.4 |
| paloaltonetworks | pan-os | 12.1.4:h2 |
| paloaltonetworks | pan-os | 12.1.4:h3 |
| paloaltonetworks | pan-os | 12.1.4:h5 |
| paloaltonetworks | pan-os | 12.1.4:h6 |
| paloaltonetworks | pan-os | 12.1.4:h7 |
| paloaltonetworks | pan-os | 12.1.7 |
| paloaltonetworks | pan-os | 12.1.7:h1 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| Siemens | RUGGEDCOM APE1808 | 𝑥 < * | ADP |