CVE-2026-0243

Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through IPv6 Crafted Packet

MEDIUM

6.5

CVSS Score

Published: May 13, 2026 at 07:10 PM UTC

Updated: October 26, 2026 at 12:10 AM UTC

1 product affected across 1 vendorPrisma SD-WAN· also runs on 19 platforms

Using Prisma SD-WAN ION by Palo Alto Networks?

Get instant alerts when new vulnerabilities affect Prisma SD-WAN ION - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.5

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

A denial of service (DoS) vulnerability in Palo Alto Networks Prisma SD-WAN ION devices enables an unauthenticated attacker in a network adjacent to a Prisma SD-WAN ION device to cause a system disruption by sending a specially crafted IPv6 packet.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Prisma SD-WAN · Palo Alto Networks

95%

6.3.1 ≤ v < 6.3.66.4.1 ≤ v < 6.4.36.5.1 ≤ v < 6.5.36.3.0 6.3.6 6.3.6 b6 6.3.6 b9 6.4.0 6.4.3 6.4.3 b6 6.5.0 6.5.3 6.5.3 b9 6.5.3 i-b10

Affected range stops below 24.3.6, so it looks safe — our inference, not a vendor statement

Affected range stops below 25.1.8, so it looks safe — our inference, not a vendor statement

Affected range stops below 25.3.3, so it looks safe — our inference, not a vendor statement

Vendor states this is fixed in 5.6.0 (unaffected)

Vendor states this is fixed in 6.1.0 (unaffected)

Affected range stops below 6.3.6, so it looks safe — our inference, not a vendor statement

Affected range stops below 6.4.3, so it looks safe — our inference, not a vendor statement

Affected range stops below 6.5.3, so it looks safe — our inference, not a vendor statement

paloaltonetworks-ion-1200 (environment) · paloaltonetworks-ion-1200-c-na (environment) · paloaltonetworks-ion-1200-c-row (environment) · paloaltonetworks-ion-1200-c5g-ww (environment) · paloaltonetworks-ion-1200-s (environment) · paloaltonetworks-ion-1200-s-c-na (environment) · paloaltonetworks-ion-1200-s-c-row (environment) · paloaltonetworks-ion-1200-s-c5g-ww (environment) · paloaltonetworks-ion-3102v (environment) · paloaltonetworks-ion-3104v (environment) · paloaltonetworks-ion-3108v (environment) · paloaltonetworks-ion-3200 (environment) · paloaltonetworks-ion-3200h (environment) · paloaltonetworks-ion-3200h-c5g-ww (environment) · paloaltonetworks-ion-5200 (environment) · paloaltonetworks-ion-7108v (environment) · paloaltonetworks-ion-7116v (environment) · paloaltonetworks-ion-9200 (environment) · paloaltonetworks-pa-5440 (environment)