5.2
Medium
CVE-2026-0244 An improper certificate validation vulnerability in the Palo Alto Networks Prisma SD-WAN ION enables man-in-the-middle…
Description
An improper certificate validation vulnerability in the Palo Alto Networks Prisma SD-WAN ION enables man-in-the-middle (MitM) attacker to impersonate the controller.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Prisma SD-WAN ION 6.5 | 6.5.0 → < 6.5.3-b15 | 6.5.3-b15 |
| Prisma SD-WAN ION 6.4 | 6.4.0 → < 6.4.3-b8 | 6.4.3-b8 |
| Prisma SD-WAN ION 6.3 | 6.3.0 → < 6.3.6-b10 | 6.3.6-b10 |
| Prisma SD-WAN ION 6.1 | earliest → < 6.1.0 | 6.1.0 |
| Prisma SD-WAN ION 5.6 | earliest → < 5.6.0 | 5.6.0 |
References
- security.paloaltonetworks.com security.paloaltonetworks.com
Timeline
- Published
- Last modified