CVE-2026-0285

Name of the Vulnerable Software and Affected Versions PAN-OS (affected versions not specified)

Description A server-side request forgery (SSRF) issue in the management web interface allows an authenticated administrator with network access to perform unauthorized requests from the firewall to internal services. This occurs due to insufficient validation of server-side requests, which could enable a remote attacker to bypass existing security mechanisms.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict management interface access to trusted internal IP addresses to minimize the risk of exploitation.