Threats tagged 'ghsa-3vmp-6pgh-4q54'

CVE-2026-0285 is a server-side request forgery (SSRF) vulnerability in Palo Alto Networks PAN-OS software. It allows an authenticated administrator with network access to the management web interface to make unauthorized requests from the firewall to internal services. The vulnerability does not affect Panorama, Cloud NGFW, or Prisma Access. The risk is mitigated if access to the management interface is restricted to trusted internal IP addresses.