Prisma SD-WAN ION CVE-2026-0244

Exploitation requires the attacker to be positioned on the same adjacent network segment as the Prisma SD-WAN ION device (CVSS AV:A), and to have achieved a man-in-the-middle position in the communication path between the ION device and its SD-WAN controller (CVSS AT:P - attack requirements present). No authentication against the ION device or controller is required (PR:N), and no user interaction is needed (UI:N). The critical limiting factors are: (1) physical or logical adjacency to the ION device's control-plane interface - internet-originated attacks are not viable; (2) successful interception of the ION-to-controller channel, which requires overcoming network controls such as VLANs, ACLs, or encrypted underlay; and (3) the attacker must be running software capable of presenting a crafted TLS certificate. Exploitation is not automatable at scale per SSVC assessment.

The nominal CVSS 4.0 base score of 5.2 (Medium) understates the potential damage when the vulnerability is successfully exploited. SSVC rates technical impact as 'total', consistent with the CVSS sub-scores of VC:H/VI:H/VA:H against the vulnerable component - controller impersonation can yield complete control over ION device behavior, routing decisions, and tunnel termination. However, three converging signals substantially constrain real-world risk: (1) AV:A limits exposure to attackers already present on the same network segment as the ION device, ruling out direct internet-sourced attacks; (2) AT:P requires the attacker to be actively positioned in the communication path between the ION device and the controller, a non-trivial prerequisite; (3) SSVC marks Exploitation as 'none' and Automatable as 'no', EPSS is 0.00% (0th percentile), and exploit maturity is rated E:U (unreported). The overall picture is a high-severity-if-achieved but difficult-to-reach vulnerability - a genuine priority for organizations using affected ION versions in environments where the adjacent network segment may be accessible to untrusted parties (e.g., co-location facilities, shared branch infrastructure), but not an immediate mass-exploitation risk. SSVC 'R:U' (user response: urgent) and 'U:Amber' (urgency: amber) suggest prompt patching is warranted despite the low current exploitation signal.

An attacker who has gained a foothold on the same network segment as a Prisma SD-WAN ION device - for example, through a compromised host in a shared branch office LAN or co-location environment - performs ARP poisoning or BGP route manipulation to insert themselves into the control-plane path between the ION device and the Palo Alto Networks controller. Because the ION fails to properly validate the controller's certificate, the attacker presents a self-signed or otherwise invalid certificate, which the device accepts, allowing full impersonation of the controller. From this position the attacker can push arbitrary policy, redirect traffic, or disable tunnels. No public exploit identified at time of analysis.