Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xpv6-xwmp-4m43

Опубликовано: 13 мая 2026
Источник: github
Github: Не прошло ревью
CVSS4: 4.8
CVSS3: 9.1

Описание

A server-side request forgery (SSRF) vulnerability in the IKEv2 implementation of Palo Alto Networks PAN-OS® software allows an unauthenticated attacker to cause the firewall to send network requests to unintended destinations or cause a denial of service (DoS) condition.

Panorama, Cloud NGFW and Prisma® Access are not impacted by these vulnerabilities.

A server-side request forgery (SSRF) vulnerability in the IKEv2 implementation of Palo Alto Networks PAN-OS® software allows an unauthenticated attacker to cause the firewall to send network requests to unintended destinations or cause a denial of service (DoS) condition.

Panorama, Cloud NGFW and Prisma® Access are not impacted by these vulnerabilities.

EPSS

Процентиль: 25%
0.00328
Низкий

4.8 Medium

CVSS4

9.1 Critical

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 9.1
nvd
3 месяца назад

A server-side request forgery (SSRF) vulnerability in the IKEv2 implementation of Palo Alto Networks PAN-OS® software allows an unauthenticated attacker to cause the firewall to send network requests to unintended destinations or cause a denial of service (DoS) condition. Panorama, Cloud NGFW and Prisma® Access are not impacted by these vulnerabilities.

CVSS3: 8.2
fstec
3 месяца назад

Уязвимость реализации протокола IKEv2 VPN-шлюза операционной системы PAN-OS, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 25%
0.00328
Низкий

4.8 Medium

CVSS4

9.1 Critical

CVSS3

Дефекты

CWE-918