CVE-2026-0258 PAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL Fetching

A server-side request forgery SSRF vulnerability in the IKEv2 implementation of Palo Alto Networks PAN-OS® software allows an unauthenticated attacker to cause the firewall to send network requests to unintended destinations or cause a denial of service DoS condition. Panorama, Cloud NGFW and...

CVE-2026-0258

CVE-2026-0258 describes a server-side request forgery (SSRF) in the IKEv2 components of PAN-OS. An unauthenticated attacker could cause the firewall to issue network requests to unintended destinations or trigger a DoS condition. Affected scope is PAN-OS IKEv2 certificate URL fetching (per CVE re...