This vulnerability (CVE-2026-0258) involves an SSRF issue in the IKEv2 implementation of Palo Alto Networks PAN-OS software. An unauthenticated attacker can exploit this flaw to make the firewall send network requests to arbitrary destinations or cause a denial of service. The affected product is PAN-OS software; however, Panorama, Cloud NGFW, and Prisma Access are explicitly not impacted. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, low confidentiality impact, high availability impact, and overall medium severity. No remediation level or patch information is currently available, and no known exploits in the wild have been reported.

An attacker exploiting this SSRF vulnerability can cause the firewall to send network requests to unintended targets, potentially enabling information disclosure or network reconnaissance. Additionally, the attacker can cause a denial of service condition, impacting firewall availability. Since the attacker is unauthenticated and no privileges are required, the risk is elevated. However, the confidentiality impact is low, and no integrity or security control impacts are indicated.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, monitor Palo Alto Networks advisories for updates. No specific mitigations are detailed at this time.