A denial of service (DoS) vulnerability in Palo Alto Networks Prisma SD-WAN ION devices enables an unauthenticated attacker in a network adjacent to a Prisma SD-WAN ION device to cause a system disruption by sending a specially crafted IPv6 packet.
CVE-2026-0243
This medium-severity CVE scores 4.9 under NVD CVSS v3. EPSS exploit probability: 0.2%, top 94% of all CVEs by exploit prediction. GitHub Security Advisory data not yet ingested — confidence will rise once GHSA publishes (typical lag: hours to days for open-source ecosystem CVEs; never for infrastructure-only CVEs).
- Lower severity and no public exploit yet
No vendor fix yet — apply a workaround or compensating control (WAF / firewall / segmentation) and watch for a patch.
- CVSS v3
- 6.5
- EG Score
- 4.9(medium)
- EPSS
- 6.9%
- KEV
- Not listed
Published
May 13, 2026
Last Modified
July 14, 2026
Advisory Details (1)
Auto-updated Jun 17, 2026CVE-2026-0243 Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through IPv6 Crafted Packet
https://security.paloaltonetworks.com/CVE-2026-0243Vendor Advisories for CVE-2026-0243(2)
These vendors published their own advisory mentioning this CVE — often with vendor-specific remediation steps + affected product lists not in NVD.
- GHSA-j263-ghj6-w2q7GitHub Security AdvisoriesMedium
A denial of service (DoS) vulnerability in Palo Alto Networks Prisma SD-WAN ION devices enables...
- CVE-2026-0243Palo Alto Networks Security AdvisoriesMedium
CVE-2026-0243 Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through IPv6 Crafted Packet
Weakness Classification(1)
MITRE Common Weakness Enumeration — the root-cause categories this CVE belongs to.
Data Freshness Timeline
(refreshed 8× in last 7d / 49× in last 30d)
Each row is a source pipeline that fetched or updated this CVE on that date, with what changed. For example, "NVD update" means NVD published or revised its analysis for this CVE; "MITRE cvelistV5" means we ingested or refreshed it from the CNA feed. Most recent first.
Showing the most recent 100 of 139 total refreshes for this CVE.
- 2026-07-15 16:57 UTCEPSS rescore
- 2026-07-15 02:00 UTCEPSS rescore
- 2026-07-14 17:20 UTCNVD updateCVSS v3 → 6.5
- 2026-07-13 22:30 UTCEPSS rescore
- 2026-07-13 06:12 UTCEPSS rescore
- 2026-07-12 05:46 UTCEPSS rescore
- 2026-07-11 08:27 UTCEPSS rescore
- 2026-07-09 19:10 UTCEPSS rescore
- 2026-07-08 15:15 UTCEPSS rescore
- 2026-07-08 15:15 UTCEPSS rescore
- 2026-07-07 13:46 UTCEPSS rescore
- 2026-07-06 16:27 UTCEPSS rescore
- 2026-07-06 02:23 UTCEPSS rescore
- 2026-07-05 02:30 UTCEPSS rescore
- 2026-07-05 02:30 UTCEPSS rescore
- 2026-07-04 06:31 UTCEPSS rescore
- 2026-07-01 15:06 UTCEPSS rescore
- 2026-07-01 15:06 UTCEPSS rescore
- 2026-06-30 23:22 UTCEPSS rescore
- 2026-06-29 22:12 UTCEG score recompute
- 2026-06-29 22:12 UTCGHSA enrichment
- 2026-06-29 14:06 UTCEPSS rescore
- 2026-06-28 14:07 UTCEPSS rescore
- 2026-06-28 04:56 UTCEPSS rescore
- 2026-06-28 04:56 UTCEPSS rescore
Show 75 moreShow fewer
- 2026-06-27 23:22 UTCEG score recompute
- 2026-06-27 23:22 UTCGHSA enrichment
- 2026-06-27 03:08 UTCEPSS rescore
- 2026-06-26 20:28 UTCEG score recompute
- 2026-06-26 20:28 UTCGHSA enrichment
- 2026-06-25 19:35 UTCEG score recompute
- 2026-06-25 19:35 UTCGHSA enrichment
- 2026-06-25 13:49 UTCEPSS rescore
- 2026-06-24 14:05 UTCEPSS rescore
- 2026-06-23 21:32 UTCEPSS rescore
- 2026-06-22 14:25 UTCEPSS rescore
- 2026-06-22 14:25 UTCEPSS rescore
- 2026-06-21 14:56 UTCEPSS rescore
- 2026-06-21 14:56 UTCEPSS rescore
- 2026-06-21 01:59 UTCEPSS rescore
- 2026-06-21 01:59 UTCEPSS rescore
- 2026-06-19 19:25 UTCEPSS rescore
- 2026-06-18 17:52 UTCEPSS rescore
- 2026-06-17 23:47 UTCEG score recompute
- 2026-06-17 23:47 UTCGHSA enrichment
- 2026-06-17 17:53 UTCEPSS rescore
- 2026-06-16 23:53 UTCEG score recompute
- 2026-06-16 23:53 UTCGHSA enrichment
- 2026-06-16 17:52 UTCEPSS rescore
- 2026-06-16 00:38 UTCEG score recompute
- 2026-06-16 00:38 UTCGHSA enrichment
- 2026-06-15 17:48 UTCEPSS rescore
- 2026-06-14 23:18 UTCEPSS rescore
- 2026-06-14 22:53 UTCEG score recompute
- 2026-06-14 22:53 UTCGHSA enrichment
- 2026-06-13 23:42 UTCEG score recompute
- 2026-06-13 23:42 UTCGHSA enrichment
- 2026-06-13 23:00 UTCEPSS rescore
- 2026-06-13 23:00 UTCEPSS rescore
- 2026-06-12 23:12 UTCEPSS rescore
- 2026-06-12 20:05 UTCEG score recompute
- 2026-06-12 20:05 UTCGHSA enrichment
- 2026-06-11 20:53 UTCEG score recompute
- 2026-06-11 20:53 UTCGHSA enrichment
- 2026-06-11 14:00 UTCEPSS rescore
- 2026-06-10 22:18 UTCEPSS rescore
- 2026-06-10 21:44 UTCEG score recompute
- 2026-06-10 21:44 UTCGHSA enrichment
- 2026-06-10 13:22 UTCEPSS rescore
- 2026-06-09 22:34 UTCEG score recompute
- 2026-06-09 22:34 UTCGHSA enrichment
- 2026-06-08 23:24 UTCEG score recompute
- 2026-06-08 23:23 UTCGHSA enrichment
- 2026-06-08 14:17 UTCEPSS rescore
- 2026-06-08 14:17 UTCEPSS rescore
- 2026-06-08 00:12 UTCEG score recompute
- 2026-06-08 00:12 UTCGHSA enrichment
- 2026-06-07 15:25 UTCEPSS rescore
- 2026-06-07 15:24 UTCEPSS rescore
- 2026-06-07 01:02 UTCEG score recompute
- 2026-06-07 01:02 UTCGHSA enrichment
- 2026-06-06 13:47 UTCEPSS rescore
- 2026-06-06 13:47 UTCEPSS rescore
- 2026-06-06 13:47 UTCEPSS rescore
- 2026-06-06 01:51 UTCEG score recompute
- 2026-06-06 01:51 UTCGHSA enrichment
- 2026-06-05 22:47 UTCEPSS rescore
- 2026-06-05 06:10 UTCEPSS rescore
- 2026-06-05 06:10 UTCEPSS rescore
- 2026-06-05 02:41 UTCEG score recompute
- 2026-06-05 02:41 UTCGHSA enrichment
- 2026-06-04 13:12 UTCEPSS rescore
- 2026-06-04 13:12 UTCEPSS rescore
- 2026-06-04 13:12 UTCEPSS rescore
- 2026-06-04 03:31 UTCEG score recompute
- 2026-06-04 03:31 UTCGHSA enrichment
- 2026-06-03 04:20 UTCEG score recompute
- 2026-06-03 04:20 UTCGHSA enrichment
- 2026-06-02 20:13 UTCEPSS rescore
- 2026-06-02 20:13 UTCEPSS rescore
Related CVEs(same CWE)
Frequently asked(5)
What is CVE-2026-0243?
When was CVE-2026-0243 disclosed?
Is CVE-2026-0243 actively exploited?
What is the CVSS score of CVE-2026-0243?
How do I remediate CVE-2026-0243?
Dependency Blast Radius
Explore the affected products and dependency analysis for CVE-2026-0243
Is Your Infrastructure Affected by CVE-2026-0243?
EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.