What’s Vulnerable › Vulnerabilities

CVE-2026-0243: Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through IPv6 Crafted Packet

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-13 · updated 2026-10-26
• Weakness: CWE-606

Description

A denial of service (DoS) vulnerability in Palo Alto Networks Prisma SD-WAN ION devices enables an unauthenticated attacker in a network adjacent to a Prisma SD-WAN ION device to cause a system disruption by sending a specially crafted IPv6 packet.

Affected products

• Palo Alto Networks Prisma SD-WAN ION: from 6.3.1 before 6.3.6; from 6.4.1 before 6.4.3; from 6.5.1 before 6.5.3; 6.3.6, 6.3.6-b6, 6.3.6-b9, 6.4.3, 6.4.3-b6, 6.5.3 (+2) — fixed in 6.3.6, 6.4.3, 6.5.3
• Palo Alto Networks Prisma SD-WAN ION: from 6.5.0 before 25.3.3; from 6.4.0 before 25.1.8; from 6.3.0 before 24.3.6 — fixed in 25.3.3, 6.5.3-b15, 25.1.8, 6.4.3-b8, 24.3.6, 6.3.6-b10

How to fix

Upgrade to a fixed version: Palo Alto Networks Prisma SD-WAN ION 6.3.6, 6.4.3, 6.5.3; Palo Alto Networks Prisma SD-WAN ION 25.3.3, 6.5.3-b15, 25.1.8, 6.4.3-b8. Check the vendor advisory for mitigations.

References

• https://security.paloaltonetworks.com/CVE-2026-0243

Get alerted when CVE-2026-0243 or the next vulnerability affects your stack