CVE-2026-0285

Published: Jul 9, 2026Modified: Jul 13, 2026

4.7

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:AmberShow less

Source: psirt@paloaltonetworks.com (Secondary)

Description

A server-side request forgery (SSRF) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator with network access to the management web interface to make unauthorized requests from the firewall to internal services. The security risk posed by this issue is minimized when the management interface is restricted to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.

Affected (203)

Products: Paloaltonetworks: Pan Os

Paloaltonetworks

1 product

Pan Os

Configuration A

77 vulnerable

Vulnerable Software	Affected Versions
Paloaltonetworks Pan Os	From 10.2.0 to 10.2.7
Paloaltonetworks Pan Os	From 10.2.11 to 10.2.13
Paloaltonetworks Pan Os	From 10.2.14 to 10.2.16
Paloaltonetworks Pan Os	From 10.2.8 to 10.2.10
Paloaltonetworks Pan Os	Version 10.2.10
Paloaltonetworks Pan Os	Version 10.2.10 h10
Paloaltonetworks Pan Os	Version 10.2.10 h11
Paloaltonetworks Pan Os	Version 10.2.10 h12
Paloaltonetworks Pan Os	Version 10.2.10 h13
Paloaltonetworks Pan Os	Version 10.2.10 h14
Paloaltonetworks Pan Os	Version 10.2.10 h17
Paloaltonetworks Pan Os	Version 10.2.10 h18
Paloaltonetworks Pan Os	Version 10.2.10 h1
Paloaltonetworks Pan Os	Version 10.2.10 h21
Paloaltonetworks Pan Os	Version 10.2.10 h27
Paloaltonetworks Pan Os	Version 10.2.10 h2
Paloaltonetworks Pan Os	Version 10.2.10 h30
Paloaltonetworks Pan Os	Version 10.2.10 h31
Paloaltonetworks Pan Os	Version 10.2.10 h36
Paloaltonetworks Pan Os	Version 10.2.10 h37
Paloaltonetworks Pan Os	Version 10.2.10 h3
Paloaltonetworks Pan Os	Version 10.2.10 h4
Paloaltonetworks Pan Os	Version 10.2.10 h5
Paloaltonetworks Pan Os	Version 10.2.10 h6
Paloaltonetworks Pan Os	Version 10.2.10 h7
Paloaltonetworks Pan Os	Version 10.2.13
Paloaltonetworks Pan Os	Version 10.2.13 h10
Paloaltonetworks Pan Os	Version 10.2.13 h15
Paloaltonetworks Pan Os	Version 10.2.13 h16
Paloaltonetworks Pan Os	Version 10.2.13 h18
Paloaltonetworks Pan Os	Version 10.2.13 h1
Paloaltonetworks Pan Os	Version 10.2.13 h21
Paloaltonetworks Pan Os	Version 10.2.13 h22
Paloaltonetworks Pan Os	Version 10.2.13 h2
Paloaltonetworks Pan Os	Version 10.2.13 h3
Paloaltonetworks Pan Os	Version 10.2.13 h4
Paloaltonetworks Pan Os	Version 10.2.13 h5
Paloaltonetworks Pan Os	Version 10.2.13 h7
Paloaltonetworks Pan Os	Version 10.2.16
Paloaltonetworks Pan Os	Version 10.2.16 h1
Paloaltonetworks Pan Os	Version 10.2.16 h4
Paloaltonetworks Pan Os	Version 10.2.16 h6
Paloaltonetworks Pan Os	Version 10.2.16 h7
Paloaltonetworks Pan Os	Version 10.2.16 h8
Paloaltonetworks Pan Os	Version 10.2.17
Paloaltonetworks Pan Os	Version 10.2.18 h1
Paloaltonetworks Pan Os	Version 10.2.18 h5
Paloaltonetworks Pan Os	Version 10.2.18 h6
Paloaltonetworks Pan Os	Version 10.2.18 h7
Paloaltonetworks Pan Os	Version 10.2.7
Paloaltonetworks Pan Os	Version 10.2.7 h10
Paloaltonetworks Pan Os	Version 10.2.7 h11
Paloaltonetworks Pan Os	Version 10.2.7 h12
Paloaltonetworks Pan Os	Version 10.2.7 h13
Paloaltonetworks Pan Os	Version 10.2.7 h14
Paloaltonetworks Pan Os	Version 10.2.7 h15
Paloaltonetworks Pan Os	Version 10.2.7 h16
Paloaltonetworks Pan Os	Version 10.2.7 h17
Paloaltonetworks Pan Os	Version 10.2.7 h18
Paloaltonetworks Pan Os	Version 10.2.7 h19
Paloaltonetworks Pan Os	Version 10.2.7 h1
Paloaltonetworks Pan Os	Version 10.2.7 h20
Paloaltonetworks Pan Os	Version 10.2.7 h21
Paloaltonetworks Pan Os	Version 10.2.7 h22
Paloaltonetworks Pan Os	Version 10.2.7 h23
Paloaltonetworks Pan Os	Version 10.2.7 h24
Paloaltonetworks Pan Os	Version 10.2.7 h2
Paloaltonetworks Pan Os	Version 10.2.7 h32
Paloaltonetworks Pan Os	Version 10.2.7 h34
Paloaltonetworks Pan Os	Version 10.2.7 h35
Paloaltonetworks Pan Os	Version 10.2.7 h3
Paloaltonetworks Pan Os	Version 10.2.7 h4
Paloaltonetworks Pan Os	Version 10.2.7 h5
Paloaltonetworks Pan Os	Version 10.2.7 h6
Paloaltonetworks Pan Os	Version 10.2.7 h7
Paloaltonetworks Pan Os	Version 10.2.7 h8
Paloaltonetworks Pan Os	Version 10.2.7 h9

Configuration B

69 vulnerable

Vulnerable Software	Affected Versions
Paloaltonetworks Pan Os	From 11.1.0 to 11.1.4
Paloaltonetworks Pan Os	From 11.1.11 to 11.1.13
Paloaltonetworks Pan Os	From 11.1.14 to 11.1.16
Paloaltonetworks Pan Os	From 11.1.8 to 11.1.10
Paloaltonetworks Pan Os	Version 11.1.10
Paloaltonetworks Pan Os	Version 11.1.10 h10
Paloaltonetworks Pan Os	Version 11.1.10 h12
Paloaltonetworks Pan Os	Version 11.1.10 h1
Paloaltonetworks Pan Os	Version 11.1.10 h21
Paloaltonetworks Pan Os	Version 11.1.10 h25
Paloaltonetworks Pan Os	Version 11.1.10 h26
Paloaltonetworks Pan Os	Version 11.1.10 h27
Paloaltonetworks Pan Os	Version 11.1.10 h28
Paloaltonetworks Pan Os	Version 11.1.10 h4
Paloaltonetworks Pan Os	Version 11.1.10 h5
Paloaltonetworks Pan Os	Version 11.1.10 h7
Paloaltonetworks Pan Os	Version 11.1.10 h9
Paloaltonetworks Pan Os	Version 11.1.13
Paloaltonetworks Pan Os	Version 11.1.13 h1
Paloaltonetworks Pan Os	Version 11.1.13 h2
Paloaltonetworks Pan Os	Version 11.1.13 h3
Paloaltonetworks Pan Os	Version 11.1.13 h5
Paloaltonetworks Pan Os	Version 11.1.13 h6
Paloaltonetworks Pan Os	Version 11.1.13 h7
Paloaltonetworks Pan Os	Version 11.1.13 h8
Paloaltonetworks Pan Os	Version 11.1.4
Paloaltonetworks Pan Os	Version 11.1.4 h10
Paloaltonetworks Pan Os	Version 11.1.4 h11
Paloaltonetworks Pan Os	Version 11.1.4 h12
Paloaltonetworks Pan Os	Version 11.1.4 h13
Paloaltonetworks Pan Os	Version 11.1.4 h15
Paloaltonetworks Pan Os	Version 11.1.4 h17
Paloaltonetworks Pan Os	Version 11.1.4 h18
Paloaltonetworks Pan Os	Version 11.1.4 h1
Paloaltonetworks Pan Os	Version 11.1.4 h25
Paloaltonetworks Pan Os	Version 11.1.4 h27
Paloaltonetworks Pan Os	Version 11.1.4 h2
Paloaltonetworks Pan Os	Version 11.1.4 h32
Paloaltonetworks Pan Os	Version 11.1.4 h33
Paloaltonetworks Pan Os	Version 11.1.4 h34
Paloaltonetworks Pan Os	Version 11.1.4 h3
Paloaltonetworks Pan Os	Version 11.1.4 h4
Paloaltonetworks Pan Os	Version 11.1.4 h5
Paloaltonetworks Pan Os	Version 11.1.4 h6
Paloaltonetworks Pan Os	Version 11.1.4 h7
Paloaltonetworks Pan Os	Version 11.1.4 h8
Paloaltonetworks Pan Os	Version 11.1.4 h9
Paloaltonetworks Pan Os	Version 11.1.5
Paloaltonetworks Pan Os	Version 11.1.6
Paloaltonetworks Pan Os	Version 11.1.6 h10
Paloaltonetworks Pan Os	Version 11.1.6 h14
Paloaltonetworks Pan Os	Version 11.1.6 h17
Paloaltonetworks Pan Os	Version 11.1.6 h18
Paloaltonetworks Pan Os	Version 11.1.6 h19
Paloaltonetworks Pan Os	Version 11.1.6 h1
Paloaltonetworks Pan Os	Version 11.1.6 h20
Paloaltonetworks Pan Os	Version 11.1.6 h21
Paloaltonetworks Pan Os	Version 11.1.6 h22
Paloaltonetworks Pan Os	Version 11.1.6 h23
Paloaltonetworks Pan Os	Version 11.1.6 h25
Paloaltonetworks Pan Os	Version 11.1.6 h29
Paloaltonetworks Pan Os	Version 11.1.6 h2
Paloaltonetworks Pan Os	Version 11.1.6 h32
Paloaltonetworks Pan Os	Version 11.1.6 h33
Paloaltonetworks Pan Os	Version 11.1.6 h34
Paloaltonetworks Pan Os	Version 11.1.6 h3
Paloaltonetworks Pan Os	Version 11.1.6 h4
Paloaltonetworks Pan Os	Version 11.1.6 h6
Paloaltonetworks Pan Os	Version 11.1.6 h7

Configuration C

47 vulnerable

Vulnerable Software	Affected Versions
Paloaltonetworks Pan Os	From 11.2.0 to 11.2.4
Paloaltonetworks Pan Os	From 11.2.11 to 11.2.13
Paloaltonetworks Pan Os	From 11.2.5 to 11.2.7
Paloaltonetworks Pan Os	From 11.2.8 to 11.2.10
Paloaltonetworks Pan Os	Version 11.2.10
Paloaltonetworks Pan Os	Version 11.2.10 h10
Paloaltonetworks Pan Os	Version 11.2.10 h1
Paloaltonetworks Pan Os	Version 11.2.10 h2
Paloaltonetworks Pan Os	Version 11.2.10 h3
Paloaltonetworks Pan Os	Version 11.2.10 h4
Paloaltonetworks Pan Os	Version 11.2.10 h5
Paloaltonetworks Pan Os	Version 11.2.10 h6
Paloaltonetworks Pan Os	Version 11.2.10 h7
Paloaltonetworks Pan Os	Version 11.2.10 h8
Paloaltonetworks Pan Os	Version 11.2.10 h9
Paloaltonetworks Pan Os	Version 11.2.4
Paloaltonetworks Pan Os	Version 11.2.4 h10
Paloaltonetworks Pan Os	Version 11.2.4 h11
Paloaltonetworks Pan Os	Version 11.2.4 h12
Paloaltonetworks Pan Os	Version 11.2.4 h14
Paloaltonetworks Pan Os	Version 11.2.4 h15
Paloaltonetworks Pan Os	Version 11.2.4 h17
Paloaltonetworks Pan Os	Version 11.2.4 h18
Paloaltonetworks Pan Os	Version 11.2.4 h1
Paloaltonetworks Pan Os	Version 11.2.4 h2
Paloaltonetworks Pan Os	Version 11.2.4 h3
Paloaltonetworks Pan Os	Version 11.2.4 h4
Paloaltonetworks Pan Os	Version 11.2.4 h5
Paloaltonetworks Pan Os	Version 11.2.4 h6
Paloaltonetworks Pan Os	Version 11.2.4 h7
Paloaltonetworks Pan Os	Version 11.2.4 h8
Paloaltonetworks Pan Os	Version 11.2.4 h9
Paloaltonetworks Pan Os	Version 11.2.7
Paloaltonetworks Pan Os	Version 11.2.7 h10
Paloaltonetworks Pan Os	Version 11.2.7 h11
Paloaltonetworks Pan Os	Version 11.2.7 h12
Paloaltonetworks Pan Os	Version 11.2.7 h13
Paloaltonetworks Pan Os	Version 11.2.7 h14
Paloaltonetworks Pan Os	Version 11.2.7 h15
Paloaltonetworks Pan Os	Version 11.2.7 h16
Paloaltonetworks Pan Os	Version 11.2.7 h17
Paloaltonetworks Pan Os	Version 11.2.7 h1
Paloaltonetworks Pan Os	Version 11.2.7 h2
Paloaltonetworks Pan Os	Version 11.2.7 h3
Paloaltonetworks Pan Os	Version 11.2.7 h4
Paloaltonetworks Pan Os	Version 11.2.7 h7
Paloaltonetworks Pan Os	Version 11.2.7 h8

Configuration D

10 vulnerable

Vulnerable Software	Affected Versions
Paloaltonetworks Pan Os	From 12.1.2 to 12.1.4
Paloaltonetworks Pan Os	From 12.1.5 to 12.1.7
Paloaltonetworks Pan Os	Version 12.1.4
Paloaltonetworks Pan Os	Version 12.1.4 h2
Paloaltonetworks Pan Os	Version 12.1.4 h3
Paloaltonetworks Pan Os	Version 12.1.4 h5
Paloaltonetworks Pan Os	Version 12.1.4 h6
Paloaltonetworks Pan Os	Version 12.1.4 h7
Paloaltonetworks Pan Os	Version 12.1.7
Paloaltonetworks Pan Os	Version 12.1.7 h1

Related CWEs

CWE-918

Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

References (1)

https://security.paloaltonetworks.com/CVE-2026-0285

Source: psirt@paloaltonetworks.com

Vendor Advisory

Timeline

No history available yet.