This vulnerability (CVE-2026-0243) in Palo Alto Networks Prisma SD-WAN ION devices involves unchecked input used as a loop condition (CWE-606), which can be exploited by an unauthenticated attacker on an adjacent network. By sending a specially crafted IPv6 packet, the attacker can cause a denial of service condition leading to system disruption. The vulnerability affects versions 6.3.0 through 6.5.0. The CVSS 4.0 vector indicates low attack complexity, no privileges or user interaction required, and a high impact on availability. No official patch or remediation guidance has been published by the vendor at this time.

Successful exploitation results in denial of service, causing system disruption of the Prisma SD-WAN ION device. This can affect network availability and potentially interrupt services relying on the device. There is no indication of confidentiality or integrity impact. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently documented, organizations should monitor Palo Alto Networks advisories for updates. Network segmentation to limit exposure of Prisma SD-WAN ION devices to untrusted adjacent networks may reduce risk.