Medium · 5.2 CVE-2026-0244 EUVD-2026-30095GHSA-9343-chmf-h73m

Prisma SD-WAN: Improper Certificate Validation Vulnerability

Published May 13, 2026 · Updated May 13, 2026 · Assigned by palo_alto

Vendor: Palo Alto Networks Product: Prisma SD-WAN ION Category: Network devices

Description

An improper certificate validation vulnerability in the Palo Alto Networks Prisma SD-WAN ION enables man-in-the-middle (MitM) attacker to impersonate the controller.

Affected products

Vendor	Product	Affected	Fixed
Palo Alto Networks	Prisma SD-WAN ION	6.5.0 – < 6.5.3-b15, 6.4.0 – < 6.4.3-b8, 6.3.0 – < 6.3.6-b10	6.5.3-b15

References

https://security.paloaltonetworks.com/CVE-2026-0244 vendor-advisory