CVE-2026-0243 - Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through IPv6 Crafted Packet

Back Back to CVE browser

MEDIUM

Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through IPv6 Crafted Packet

Published May 13, 2026

4.9

MEDIUM

CVSS 4.0

EPSS 0.17%

Description

A denial of service (DoS) vulnerability in Palo Alto Networks Prisma SD-WAN ION devices enables an unauthenticated attacker in a network adjacent to a Prisma SD-WAN ION device to cause a system disruption by sending a specially crafted IPv6 packet.

Affected products

Vendor Palo Alto Networks Product Prisma SD-WAN ION Default
unaffected
- Version
  6.3.0
  Status
  affected
  Constraints
  <24.3.6
- Version
  6.4.0
  Status
  affected
  Constraints
  <25.1.8
- Version
  6.5.0
  Status
  affected
  Constraints
  <25.3.3
- Version
  5.6.0
  Status
  unaffected
  Constraints
  -
- Version
  6.1.0
  Status
  unaffected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Palo Alto Networks

Prisma SD-WAN ION

unaffected

Version	Status	Constraints
6.3.0	affected	<24.3.6
6.4.0	affected	<25.1.8
6.5.0	affected	<25.3.3
5.6.0	unaffected	-
6.1.0	unaffected	-

Remediation

Vendor solution

Version Minor Version Suggested Solution Prisma SD-WAN ION 6.5 6.5.1 through 6.5.3 Upgrade to 6.5.3-b15 or later. Prisma SD-WAN ION 6.4 6.4.1 through 6.4.3 Upgrade to 6.4.3-b8 or later. Prisma SD-WAN ION 6.3 6.3.1 through 6.3.6 Upgrade to 6.3.6-b10 or later. Prisma SD-WAN ION 6.1 No action needed. Prisma SD-WAN ION 5.6 No action needed.

Weaknesses (1)

CWE-606