Prisma Sd-wan Ion CVEs and Security Vulnerabilities

CVE-2026-0243

Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through IPv6 Crafted Packet

A denial of service (DoS) vulnerability in Palo Alto Networks Prisma SD-WAN ION devices enables an unauthenticated attacker in a network adjacent to a Prisma SD-WAN ION device to cause a system disruption by sending a specially crafted IPv6 packet.

CVSS 4.0 · 4.9 Medium EPSS < 1% KEV · Not listed

Vendors

Palo Alto Networks Paloaltonetworks

Products

Prisma Sd-wan Ion Ion 1200 Ion 1200-c-na and 18 more

CVE-2026-0244

Prisma SD-WAN: Improper Certificate Validation Vulnerability

An improper certificate validation vulnerability in the Palo Alto Networks Prisma SD-WAN ION enables man-in-the-middle (MitM) attacker to impersonate the controller.

CVSS 4.0 · 5.2 Medium EPSS < 1% KEV · Not listed