High severity8.1NVD Advisory· Published May 13, 2026· Updated Jul 14, 2026
CVE-2026-0244
CVE-2026-0244
Description
An improper certificate validation vulnerability in the Palo Alto Networks Prisma SD-WAN ION enables man-in-the-middle (MitM) attacker to impersonate the controller.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
12cpe:2.3:a:paloaltonetworks:prisma_sd-wan:*:*:*:*:*:*:*:*+ 10 more
- cpe:2.3:a:paloaltonetworks:prisma_sd-wan:*:*:*:*:*:*:*:*range: >=6.3.1,<6.3.6
- cpe:2.3:a:paloaltonetworks:prisma_sd-wan:6.3.6:-:*:*:*:*:*:*
- cpe:2.3:a:paloaltonetworks:prisma_sd-wan:6.3.6:b6:*:*:*:*:*:*
- cpe:2.3:a:paloaltonetworks:prisma_sd-wan:6.3.6:b9:*:*:*:*:*:*
- cpe:2.3:a:paloaltonetworks:prisma_sd-wan:6.4.3:-:*:*:*:*:*:*
- cpe:2.3:a:paloaltonetworks:prisma_sd-wan:6.4.3:b6:*:*:*:*:*:*
- cpe:2.3:a:paloaltonetworks:prisma_sd-wan:6.4.3:b8:*:*:*:*:*:*
- cpe:2.3:a:paloaltonetworks:prisma_sd-wan:6.5.3:-:*:*:*:*:*:*
- cpe:2.3:a:paloaltonetworks:prisma_sd-wan:6.5.3:b11:*:*:*:*:*:*
- cpe:2.3:a:paloaltonetworks:prisma_sd-wan:6.5.3:b9:*:*:*:*:*:*
- cpe:2.3:a:paloaltonetworks:prisma_sd-wan:6.5.3:i-b10:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- security.paloaltonetworks.com/CVE-2026-0244nvdVendor Advisory
News mentions
0No linked articles in our index yet.