Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools

Prisma SD-WAN ION

Source -

CNA

CNA CVEs -

2

ADP CVEs -

0

CISA CVEs -

0

NVD CVEs -

0
Related CVEsRelated VendorsRelated AssignersReports
2Vulnerabilities found
CVE-2026-0243
Assigner-Palo Alto Networks, Inc.
ShareView Details
Assigner-Palo Alto Networks, Inc.
CVSS Score-4.9||MEDIUM
EPSS-0.17% / 6.92%
||
7 Day CHG+0.01%
Published-13 May, 2026 | 19:10
Updated-14 May, 2026 | 10:48
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through IPv6 Crafted Packet

A denial of service (DoS) vulnerability in Palo Alto Networks Prisma SD-WAN ION devices enables an unauthenticated attacker in a network adjacent to a Prisma SD-WAN ION device to cause a system disruption by sending a specially crafted IPv6 packet.

Action-Not Available
Vendor-Palo Alto Networks, Inc.
Product-Prisma SD-WAN ION
CWE ID-CWE-606
Unchecked Input for Loop Condition
CVE-2026-0244
Assigner-Palo Alto Networks, Inc.
ShareView Details
Assigner-Palo Alto Networks, Inc.
CVSS Score-5.2||MEDIUM
EPSS-0.22% / 12.12%
||
7 Day CHG+0.11%
Published-13 May, 2026 | 19:03
Updated-14 Jul, 2026 | 14:16
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Prisma SD-WAN: Improper Certificate Validation Vulnerability

An improper certificate validation vulnerability in the Palo Alto Networks Prisma SD-WAN ION enables man-in-the-middle (MitM) attacker to impersonate the controller.

Action-Not Available
Vendor-Palo Alto Networks, Inc.
Product-prisma_sd-wanion_5200ion_3102vion_9200ion_1200-sion_1200-s-c-naion_1200-s-c5g-wwion_7108vion_1200-s-c-rowpa-5440ion_1200-c-naion_1200-c5g-wwion_3104vion_3200h-c5g-wwion_1200-c-rowion_3200hion_3108vion_1200ion_7116vion_3200Prisma SD-WAN ION
CWE ID-CWE-295
Improper Certificate Validation