This vulnerability involves SSRF in the IKEv2 implementation of Palo Alto Networks PAN-OS software specifically affecting the Cloud NGFW product. An unauthenticated attacker can leverage this SSRF flaw to make the firewall send network requests to arbitrary destinations or cause a denial of service condition. The issue does not affect Panorama, Cloud NGFW (as a service), or Prisma Access products. The CVSS 4.8 score reflects a medium severity with network attack vector, low attack complexity, no privileges required, and partial impact on availability. No remediation level or patch is currently documented, and no known exploits have been observed.

An attacker exploiting this SSRF vulnerability can cause the affected firewall to send network requests to unintended targets or cause a denial of service. This could disrupt firewall operations or potentially be used to access internal network resources indirectly. However, the impact is limited to the affected PAN-OS IKEv2 implementation on Cloud NGFW and does not extend to other Palo Alto products like Panorama or Prisma Access. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, organizations should monitor Palo Alto Networks advisories for updates. No specific mitigations are documented at this time.