Skip to content
5.2 Medium

CVE-2026-0244 An improper certificate validation vulnerability in the Palo Alto Networks Prisma SD-WAN ION enables man-in-the-middle…

Description

An improper certificate validation vulnerability in the Palo Alto Networks Prisma SD-WAN ION enables man-in-the-middle (MitM) attacker to impersonate the controller.

Affected products and versions

Product Affected versions Fixed in
Prisma SD-WAN ION 6.5 6.5.0 → < 6.5.3-b15 6.5.3-b15
Prisma SD-WAN ION 6.4 6.4.0 → < 6.4.3-b8 6.4.3-b8
Prisma SD-WAN ION 6.3 6.3.0 → < 6.3.6-b10 6.3.6-b10
Prisma SD-WAN ION 6.1 earliest → < 6.1.0 6.1.0
Prisma SD-WAN ION 5.6 earliest → < 5.6.0 5.6.0

References

Timeline

  1. Published
  2. Last modified
The 2 CVEs of Prisma SD-WAN ION →
Track this CVE