Vulnerability Description
An improper certificate validation vulnerability in the Palo Alto Networks Prisma SD-WAN ION enables man-in-the-middle (MitM) attacker to impersonate the controller.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Paloaltonetworks | Prisma Sd-Wan | >= 6.3.1, < 6.3.6 |
| Paloaltonetworks | Ion 1200 | - |
| Paloaltonetworks | Ion 1200-C-Na | - |
| Paloaltonetworks | Ion 1200-C-Row | - |
| Paloaltonetworks | Ion 1200-C5G-Ww | - |
| Paloaltonetworks | Ion 1200-S | - |
| Paloaltonetworks | Ion 1200-S-C-Na | - |
| Paloaltonetworks | Ion 1200-S-C-Row | - |
| Paloaltonetworks | Ion 1200-S-C5G-Ww | - |
| Paloaltonetworks | Ion 3102V | - |
| Paloaltonetworks | Ion 3104V | - |
| Paloaltonetworks | Ion 3108V | - |
| Paloaltonetworks | Ion 3200 | - |
| Paloaltonetworks | Ion 3200H | - |
| Paloaltonetworks | Ion 3200H-C5G-Ww | - |
| Paloaltonetworks | Ion 5200 | - |
| Paloaltonetworks | Ion 7108V | - |
| Paloaltonetworks | Ion 7116V | - |
| Paloaltonetworks | Ion 9200 | - |
| Paloaltonetworks | Pa-5440 | - |
Related Weaknesses (CWE)
References
- https://security.paloaltonetworks.com/CVE-2026-0244Vendor Advisory
FAQ
What is CVE-2026-0244?
CVE-2026-0244 is a vulnerability with a CVSS score of 8.1 (HIGH). An improper certificate validation vulnerability in the Palo Alto Networks Prisma SD-WAN ION enables man-in-the-middle (MitM) attacker to impersonate the controller.
How severe is CVE-2026-0244?
CVE-2026-0244 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-0244?
Check the references section above for vendor advisories and patch information. Affected products include: Paloaltonetworks Prisma Sd-Wan, Paloaltonetworks Ion 1200, Paloaltonetworks Ion 1200-C-Na, Paloaltonetworks Ion 1200-C-Row, Paloaltonetworks Ion 1200-C5G-Ww.