CVE-2026-0285
MEDIUMPAN-OS Management Web Interface - Authenticated Server-Side Request Forgery
Title source: manualDescription
A server-side request forgery (SSRF) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator with network access to the management web interface to make unauthorized requests from the firewall to internal services. The security risk posed by this issue is minimized when the management interface is restricted to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
https://security.paloaltonetworks.com/CVE-2026-0285
Scores
CVSS v3
4.9
EPSS
0.0049
EPSS Percentile
38.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-918
Status
published
Products (8)
Palo Alto Networks/Cloud NGFW
All
Palo Alto Networks/PAN-OS
10.2.0 - 10.2.18-h8
Palo Alto Networks/PAN-OS
11.1.0 - 11.1.16
Palo Alto Networks/PAN-OS
11.2.0 - 11.2.13
Palo Alto Networks/PAN-OS
12.1.0 - 12.1.8
Palo Alto Networks/Prisma Access
All
paloaltonetworks/pan-os
10.2.7 (28 CPE variants)
paloaltonetworks/pan-os
10.2.10 (16 CPE variants)
Published
Jul 09, 2026
Tracked Since
Jul 10, 2026