Vulnerability Details CVE-2026-0244
An improper certificate validation vulnerability in the Palo Alto Networks Prisma SD-WAN ION enables man-in-the-middle (MitM) attacker to impersonate the controller.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 12.1%
CVSS Severity
CVSS v3 Score 8.1
Products affected by CVE-2026-0244
-
cpe:2.3:a:paloaltonetworks:prisma_sd-wan:6.3.1
-
cpe:2.3:a:paloaltonetworks:prisma_sd-wan:6.3.2
-
cpe:2.3:a:paloaltonetworks:prisma_sd-wan:6.3.3
-
cpe:2.3:a:paloaltonetworks:prisma_sd-wan:6.3.4
-
cpe:2.3:a:paloaltonetworks:prisma_sd-wan:6.3.5
-
cpe:2.3:a:paloaltonetworks:prisma_sd-wan:6.3.6
-
cpe:2.3:a:paloaltonetworks:prisma_sd-wan:6.4.1
-
cpe:2.3:a:paloaltonetworks:prisma_sd-wan:6.4.2
-
cpe:2.3:a:paloaltonetworks:prisma_sd-wan:6.4.3
-
cpe:2.3:a:paloaltonetworks:prisma_sd-wan:6.5.1
-
cpe:2.3:a:paloaltonetworks:prisma_sd-wan:6.5.2
-
cpe:2.3:a:paloaltonetworks:prisma_sd-wan:6.5.3
-
cpe:2.3:h:paloaltonetworks:ion_1200-c-na:-
-
cpe:2.3:h:paloaltonetworks:ion_1200-c-row:-
-
cpe:2.3:h:paloaltonetworks:ion_1200-c5g-ww:-
-
cpe:2.3:h:paloaltonetworks:ion_1200-s-c-na:-
-
cpe:2.3:h:paloaltonetworks:ion_1200-s-c-row:-
-
cpe:2.3:h:paloaltonetworks:ion_1200-s-c5g-ww:-
-
cpe:2.3:h:paloaltonetworks:ion_1200-s:-
-
cpe:2.3:h:paloaltonetworks:ion_1200:-
-
cpe:2.3:h:paloaltonetworks:ion_3102v:-
-
cpe:2.3:h:paloaltonetworks:ion_3104v:-
-
cpe:2.3:h:paloaltonetworks:ion_3108v:-
-
cpe:2.3:h:paloaltonetworks:ion_3200:-
-
cpe:2.3:h:paloaltonetworks:ion_3200h-c5g-ww:-
-
cpe:2.3:h:paloaltonetworks:ion_3200h:-
-
cpe:2.3:h:paloaltonetworks:ion_5200:-
-
cpe:2.3:h:paloaltonetworks:ion_7108v:-
-
cpe:2.3:h:paloaltonetworks:ion_7116v:-
-
cpe:2.3:h:paloaltonetworks:ion_9200:-
-
cpe:2.3:h:paloaltonetworks:pa-5440:-