CVE-2026-0258
A server-side request forgery (SSRF) vulnerability in the IKEv2 implementation of Palo Alto Networks PAN-OS® software allows an unauthenticated attacker to cause the firewall to send network reques...
Affects 0 products across 6 vendors.
Attacker causes the server to make HTTP requests to attacker-chosen destinations, potentially reaching internal services.
Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.
A low severity vulnerability affects Cloud systems (CVE-2026-0258). No public exploit code is currently available. Review vendor advisories and apply patches during the next maintenance window.
BSID: BS-2026-GLOBAL-059148-I • Model: rule-based-v1 • Confidence: LOW
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2026-0258?
Is CVE-2026-0258 actively exploited?
How do I remediate CVE-2026-0258?
What systems are affected by CVE-2026-0258?
| CVE ID | CVE-2026-0258 |
|---|---|
| BSID | BS-2026-GLOBAL-059148-I BreachSpider Global ID |
| Published | 2026-05-13 |
| Last Modified | 2026-06-09 |
| ICS Relevance | 80% |
| Weakness (CWE) | |
| Domains | |
| Source | NVD |
A server-side request forgery (SSRF) vulnerability in the IKEv2 implementation of Palo Alto Networks PAN-OS® software allows an unauthenticated attacker to cause the firewall to send network requests to unintended destinations or cause a denial of service (DoS) condition. Panorama, Cloud NGFW and Prisma® Access are not impacted by these vulnerabilities.
Source: NIST NVD / MITRE CVE Database
Vulnerability details: A server-side request forgery (SSRF) vulnerability in the IKEv2 implementation of Palo Alto Networks PAN-OS® software allows an unauthenticated attacker to cause the firewall to send network requests to unintended destinations or cause a denial of service (DoS) condition. Panorama, Cloud NGFW and Prisma® Access are not impacted by these vulnerabilities. CVSS vector: Not available.
Exploitation Likelihood: MINIMAL
| Vendor | Product | Fixed Version |
|---|---|---|
| Cloud | — | — |
| Fujitsu-Siemens | — | — |
| Palo Alto | — | — |
| Palo Alto Networks | — | — |
| Panorama | — | — |
| Prisma | — | — |
No patch URL on record. Monitor vendor security advisories directly.
| CISA KEV | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
SAGE Enrichment Record — provenance & audit hash
| Model | rule-based-v1 |
|---|---|
| Confidence | LOW |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | 390b4e319c14b9e1ed463824dd9f03732154d732ef1b20e193b69ea6044ff30c69678b44539d4d341cc3f3b7f2e9cd13e1cd6cea268949caed68774cde83c193 |
ICS/OT Vulnerability Intelligence for Your Environment
BreachSpider monitors 353,228 CVEs across ICS/OT vendors. SAGE-enriched alerts with virtual patches, NERC-CIP mapping, and PSIRT contacts delivered to your SIEM in minutes.
Join free →