Description
A server-side request forgery (SSRF) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator with network access to the management web interface to make unauthorized requests from the firewall to internal services.
The security risk posed by this issue is minimized when the management interface is restricted to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .
Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Palo Alto Networks | Cloud NGFW | — | All |
| Palo Alto Networks | PAN-OS | 12.1.0 – < 12.1.8, 11.2.0 – < 11.2.13, 11.1.0 – < 11.1.16, 10.2.0 – < 10.2.18-h8 | 12.1.8 |
| Palo Alto Networks | Prisma Access | — | All |
Advisories 3
- SSA-104023 SSA-104023: Multiple Vulnerabilities in Palo Alto Networks PAN-OS on RUGGEDCOM APE1808 Devices Siemens ProductCERT · Nov 10, 2026
- NCSC-2026-0227 Kwetsbaarheden verholpen in Palo Alto Networks PAN-OS NCSC-NL (Netherlands) · Jul 13, 2026
- WID-SEC-2026-2261 Palo Alto Networks PAN-OS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 9, 2026
References
- https://security.paloaltonetworks.com/CVE-2026-0285 vendor-advisory