Vulnerability-Lookup

Search criteria

Vendor

Product

Assigner

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

CVE-2026-0299 (GCVE-0-2026-0299)

Vulnerability from nvd – Published: 2026-08-13 02:04 – Updated: 2026-08-13 13:21

Title

GlobalProtect App: Local Privilege Escalation Vulnerabilities

Summary

Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on iOS, Android, and Chrome OS is not affected.

Severity

5.9 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-13 03:55 UTC

CWE

CWE-426 - Untrusted Search Path

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0299	vendor-advisory

Impacted products

3 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h15 (custom) Affected: 6.2.0 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Linux::
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h14 (custom) Affected: 6.2.0 , < 6.2.8-h13 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Windows::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom)

Date Public

2026-08-12 16:00

Credits

our internal security research teams

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0299",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-13T03:55:52.857599Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-13T13:21:02.891Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Linux:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h15",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS",
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h14",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h14",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h13",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h15",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:linux:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:ios:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:android:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:chrome_os:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "our internal security research teams"
        }
      ],
      "datePublic": "2026-08-12T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect\u2122 app enable a local user to escalate their privileges to NT AUTHORITY\\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges.\u003cbr\u003e\u003cbr\u003eThe GlobalProtect app on iOS, Android, and Chrome OS is not affected."
            }
          ],
          "value": "Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect\u2122 app enable a local user to escalate their privileges to NT AUTHORITY\\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges.\n\nThe GlobalProtect app on iOS, Android, and Chrome OS is not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-233 Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-426",
              "description": "CWE-426 Untrusted Search Path",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T02:04:07.275Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0299"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3/6.2 on Linux\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through 6.3.3-h14\u003cbr\u003e \u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3-h15 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Linux\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3 on macOS\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.3.0 through\u0026nbsp;6.3.3-h13\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3-h14\u0026nbsp;\u003cspan\u003e(6.3.3-1121) \u003c/span\u003e or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.3.0 through\u0026nbsp;6.3.3-h13\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3-h14 \u003cspan\u003e(6.3.3-1121) \u003c/span\u003eor later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.2 on macOS\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through\u0026nbsp;6.2.8-h12\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.2.8-h13\u0026nbsp;(6.2.8-1045) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.2 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through\u0026nbsp;6.2.8-h12\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.2.8-h13  (6.2.8-1045) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.0 on macOS\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.0 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Chrome OS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                              MINOR VERSION             SUGGESTED SOLUTION\nGlobalProtect App 6.3/6.2 on Linux   6.2.0 through 6.3.3-h14   Upgrade to 6.3.3-h15 or later.\nGlobalProtect App 6.0 on Linux       6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3 on macOS       6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.3 on Windows     6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on macOS       6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.2 on Windows     6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.0 on macOS       6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.0 on Windows     6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App on iOS                                       No action needed.\nGlobalProtect App on Android                                   No action needed.\nGlobalProtect App on Chrome OS                                 No action needed."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "GlobalProtect App: Local Privilege Escalation Vulnerabilities",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No known workarounds exist for this issue."
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.3",
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.9",
        "GlobalProtect App 6.2.8-c982",
        "GlobalProtect App 6.2.8-c948",
        "GlobalProtect App 6.2.8-c910",
        "GlobalProtect App 6.2.8-c471",
        "GlobalProtect App 6.2.8-c431",
        "GlobalProtect App 6.2.8-c416",
        "GlobalProtect App 6.2.8-c317",
        "GlobalProtect App 6.2.8-c263",
        "GlobalProtect App 6.2.8-c243",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.0.14",
        "GlobalProtect App 6.0.13",
        "GlobalProtect App 6.0.12",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0299",
    "datePublished": "2026-08-13T02:04:07.275Z",
    "dateReserved": "2025-11-03T20:44:57.175Z",
    "dateUpdated": "2026-08-13T13:21:02.891Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0298 (GCVE-0-2026-0298)

Vulnerability from nvd – Published: 2026-08-13 02:02 – Updated: 2026-08-13 13:20

Title

GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)

Summary

An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on an affected client. The GlobalProtect app on Linux, macOS, iOS, Android, and Chrome OS is not affected.

Severity

5.2 (Medium)


                        
                          CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-13 03:55 UTC

CWE

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0298	vendor-advisory

Impacted products

2 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h14 (custom) Affected: 6.2.0 , < 6.2.8-h13 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Windows::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom)

Date Public

2026-08-12 16:00

Credits

our internal security research teams

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0298",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-13T03:55:53.877148Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-13T13:20:48.963Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h14",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h14",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h13",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux",
            "macOS",
            "Android",
            "Chrome OS",
            "iOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cspan\u003eThis issue is applicable only to devices configured to use SAML authentication in the GlobalProtect\u003c/span\u003e \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-user-guide/globalprotect-app-for-windows/use-connect-before-logon-followed-by-the-authentication-method\"\u003e\u003cspan\u003eConnect Before Logon\u003c/span\u003e\u003c/a\u003e\u003cspan\u003e feature.\u003c/span\u003e\u003c/p\u003e"
            }
          ],
          "value": "This issue is applicable only to devices configured to use SAML authentication in the GlobalProtect Connect Before Logon (https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-user-guide/globalprotect-app-for-windows/use-connect-before-logon-followed-by-the-authentication-method) feature."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:linux:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:macos:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:android:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:chrome_os:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:ios:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "our internal security research teams"
        }
      ],
      "datePublic": "2026-08-12T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect\u2122 app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on an affected client.\u003cbr\u003e\u003cbr\u003eThe GlobalProtect app on Linux, macOS, iOS, Android, and Chrome OS  is not affected."
            }
          ],
          "value": "An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect\u2122 app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on an affected client.\n\nThe GlobalProtect app on Linux, macOS, iOS, Android, and Chrome OS  is not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-242",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-242 Code Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "ADJACENT",
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T02:02:47.196Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0298"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.3.0 through 6.3.3-h13\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3-h14\u0026nbsp;(6.3.3-1121) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.2 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through 6.2.8-h12\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.2.8-h13\u0026nbsp;(6.2.8-1045) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.0 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App All on macOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App All on Linux\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App All on iOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App All on Android\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App All on Chrome OS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                              MINOR VERSION             SUGGESTED SOLUTION\nGlobalProtect App 6.3 on Windows     6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on Windows     6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.0 on Windows     6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App All on macOS                                 No action needed.\nGlobalProtect App All on Linux                                 No action needed.\nGlobalProtect App All on iOS                                   No action needed.\nGlobalProtect App All on Android                               No action needed.\nGlobalProtect App All on Chrome OS                             No action needed."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cspan\u003eCustomers can mitigate the risk of this issue by taking either of the following actions:\u003c/span\u003e\u003c/p\u003e\u003col\u003e\u003cli\u003e\u003cp\u003e\u003cspan\u003eUse\u0026nbsp;\u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-user-guide/globalprotect-app-for-windows/use-connect-before-logon-followed-by-the-authentication-method\"\u003e\u003cspan\u003eConnect Before Logon (CBL\u003c/span\u003e\u003c/a\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-user-guide/globalprotect-app-for-windows/use-connect-before-logon-followed-by-the-authentication-method\"\u003e\u003cspan\u003e)\u003c/span\u003e\u003c/a\u003e\u0026nbsp;\u003cspan\u003ewithout SAML Authentication\u003c/span\u003e\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003e\u003cspan\u003eUse\u0026nbsp;\u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/administration/globalprotect-quick-configs/remote-access-vpn-with-pre-logon\"\u003e\u003cspan\u003ePre-logon with machine certificate\u003c/span\u003e\u003c/a\u003e\u0026nbsp;\u003cspan\u003einstead of Connect Before Logon (CBL).\u003c/span\u003e\u003c/p\u003e\u003c/li\u003e\u003c/ol\u003e"
            }
          ],
          "value": "Customers can mitigate the risk of this issue by taking either of the following actions:\n\n 1. Use Connect Before Logon (CBL (https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-user-guide/globalprotect-app-for-windows/use-connect-before-logon-followed-by-the-authentication-method)) (https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-user-guide/globalprotect-app-for-windows/use-connect-before-logon-followed-by-the-authentication-method) without SAML Authentication\n\n 2. Use Pre-logon with machine certificate (https://docs.paloaltonetworks.com/globalprotect/administration/globalprotect-quick-configs/remote-access-vpn-with-pre-logon) instead of Connect Before Logon (CBL)."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.3",
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.0.14",
        "GlobalProtect App 6.0.13",
        "GlobalProtect App 6.0.12",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_cpeGeneratedAt": "2026-08-12T02:10:58.226Z",
      "x_cpeManuallyEdited": true,
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0298",
    "datePublished": "2026-08-13T02:02:47.196Z",
    "dateReserved": "2025-11-03T20:44:56.118Z",
    "dateUpdated": "2026-08-13T13:20:48.963Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0297 (GCVE-0-2026-0297)

Vulnerability from nvd – Published: 2026-08-13 02:01 – Updated: 2026-08-13 13:20

Title

GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake

Summary

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man-in-the-middle (MitM) attacker or a rogue gateway to disrupt system processes and potentially execute arbitrary code with elevated privileges (SYSTEM privileges on Windows, and root privileges on macOS and Linux).

Severity

5.2 (Medium)


                        
                          CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-13 03:55 UTC

CWE

CWE-787 - Out-of-bounds Write

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0297	vendor-advisory

Impacted products

3 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h15 (custom) Affected: 6.2.0 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Linux::
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h14 (custom) Affected: 6.2.0 , < 6.2.8-h13 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Windows::
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.5 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Chrome_OS::

Date Public

2026-08-12 16:00

Credits

our internal security research teams

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0297",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-13T03:55:54.896353Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-13T13:20:35.603Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Linux:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h15",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS",
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h14",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h14",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h13",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Chrome_OS:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.5",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.5",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003eNo special configuration is required to be affected by this issue.\u003c/span\u003e"
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h15",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:linux:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:ios:*:*:*:*:*",
                  "versionEndExcluding": "6.3.5",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:android:*:*:*:*:*",
                  "versionEndExcluding": "6.3.5",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:chrome_os:*:*:*:*:*",
                  "versionEndExcluding": "6.3.5",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:ios:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:android:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:chrome_os:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "our internal security research teams"
        }
      ],
      "datePublic": "2026-08-12T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect\u2122 app that enables a man-in-the-middle (MitM) attacker or a rogue gateway to disrupt system processes and potentially execute arbitrary code with elevated privileges (SYSTEM privileges on Windows, and root privileges on macOS and Linux). \u003c/p\u003e"
            }
          ],
          "value": "A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect\u2122 app that enables a man-in-the-middle (MitM) attacker or a rogue gateway to disrupt system processes and potentially execute arbitrary code with elevated privileges (SYSTEM privileges on Windows, and root privileges on macOS and Linux)."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-540",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-540 Overread Buffers"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "ADJACENT",
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T02:01:13.682Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0297"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3/6.2 on Linux\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through 6.3.3-h14\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3-h15 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Linux\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on macOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h13\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h14\u0026nbsp;(6.3.3-1121) or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on macOS\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h12\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h13\u0026nbsp;(6.2.8-1045) or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on macOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h13\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h14 (6.3.3-1121) or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h12\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h13 (6.2.8-1045) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u0026nbsp;\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3/6.1 on iOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.3.4\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.5 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on iOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3/6.1 on Android\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.3.4\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.5 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Android\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3/6.1 on ChromeOS\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.3.4\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.5 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on ChromeOS\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                                 MINOR VERSION             SUGGESTED SOLUTION\nGlobalProtect App 6.3/6.2 on Linux      6.2.0 through 6.3.3-h14   Upgrade to 6.3.3-h15 or later.\nGlobalProtect App 6.0 on Linux          6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3 on macOS          6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on macOS          6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.0 on macOS          6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3 on Windows        6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on Windows        6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.0 on Windows        6.0.0 through 6.0.14      Upgrade to 6.0.15 or later. \nGlobalProtect App 6.3/6.1 on iOS        6.1.0 through 6.3.4       Upgrade to 6.3.5 or later.\nGlobalProtect App 6.0 on iOS            6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3/6.1 on Android    6.1.0 through 6.3.4       Upgrade to 6.3.5 or later.\nGlobalProtect App 6.0 on Android        6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3/6.1 on ChromeOS   6.1.0 through 6.3.4       Upgrade to 6.3.5 or later.\nGlobalProtect App 6.0 on ChromeOS       6.0.0 through 6.0.14      Upgrade to 6.0.15 or later."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eCustomers can mitigate the risk of this issue by taking either of the following three actions:\u003cbr\u003e\u003c/p\u003e\u003col\u003e\u003cli\u003e\u003cp\u003eEnforce SSL-Only VPN Connections:\u0026nbsp;Modify your GlobalProtect Portal configurations to disable IPSec/UDP tunneling, forcing the client applications to connect exclusively via SSL VPN mode.\u0026nbsp;Customer can configure \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/administration/globalprotect-portals/customize-the-globalprotect-app\"\u003eConnect with SSL Only\u003c/a\u003e tunnel by configuring \u0027 Advanced Control for Tunnel Mode Behavior\u0027 on GlobalProtect Portal Network \u0026gt; Portal \u0026gt; Agent Configuration\u0026gt;  Advanced Control for Tunnel Mode Behavior\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eCustomers can configure SSL only tunnel protocol by un-checking \u0027\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/ngfw/help/10-2/globalprotect/network-globalprotect-gateways/globalprotect-gateways-agent-tab/tunnel-settings-tab\"\u003eEnable IPSec\u003c/a\u003e\u0027  on GlobalProtect gateway at\u003cb\u003e\u0026nbsp;\u003c/b\u003e\u003cb\u003eNetwork\u003c/b\u003e \u0026gt; \u003cb\u003eGateway\u003c/b\u003e\u003cb\u003e \u003c/b\u003e\u0026gt;\u003cb\u003e \u003c/b\u003e\u003cb\u003eAgent \u003c/b\u003e\u0026gt; \u003cb\u003eTunnel Setting\u003c/b\u003e \u0026gt; \u003cb\u003eEnable IPSec\u003c/b\u003e\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003e\u003cb\u003eWorkaround\u0026nbsp; for new and existing GlobalProtect app \u0026gt;= 6.2.8 or GlobalProtect app \u0026gt;= 6.3.3 installations on Windows and macOS\u003c/b\u003e \u003cbr\u003eGlobalProtect 6.2.8 and GlobalProtect app 6.3.3 on Windows and macOS introduce a new configuration\u0026nbsp;\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/platform-explorer?productCategoryTags=pan%3Aproductcategory%2Fglobalprotect\"\u003eEnable Strict Certificate Check\u003c/a\u003e which enables certificate checks required to mitigate this issue on Windows and macOS.\u003cbr\u003e\u003cbr\u003eThis configuration only takes effect after the first connection between the GlobalProtect client and the GlobalProtect portal. Therefore the first connection is not protected. To ensure that the first connection is also protected, additionally follow the steps noted below for GlobalProtect \u0026lt; 6.2.8.\u003cbr\u003eThis configuration option is currently not available for the GlobalProtect app on platforms other than Windows and macOS.\u003cbr\u003e\u003cbr\u003e\u003cb\u003eWorkaround for new and existing GlobalProtect app \u0026lt; 6.2.8 or GlobalProtect app \u0026lt; 6.3.3 installations on macOS\u003c/b\u003e\u003cbr\u003e\u003cb\u003e\u003c/b\u003e\u003c/p\u003e\u003col\u003e\u003cli\u003e\u003cp\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-apps/deploy-app-settings-transparently/deploy-app-settings-to-mac-endpoints/deploy-app-settings-in-the-mac-plist\"\u003eUse Xcode to edit the com.paloaltonetworks.GlobalProtect.settings.plist file\u003c/a\u003e\u0026nbsp;in /Library/Preferences.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eAdd a \"Settings\" section if it does not exist within the GlobalProtect section.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eWithin the \"Settings\" section, add the full-chain-cert-verify key and set the string value to yes\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003e\u0026nbsp;Restart macOS.\u003c/p\u003e\u003c/li\u003e\u003c/ol\u003e\u003ctt\u003e\u003ctt\u003e\u2003\u0026lt;key\u0026gt;GlobalProtect\u0026lt;/key\u0026gt;\u003c/tt\u003e\u003cbr\u003e\u003ctt\u003e\u2003\u0026lt;dict\u0026gt;\u003c/tt\u003e\u003cbr\u003e\u003ctt\u003e\u003ctt\u003e\u0026nbsp; \u2003\u0026nbsp; (removed for brevity)\u003c/tt\u003e\u003c/tt\u003e\u003cbr\u003e\u003ctt\u003e\u0026nbsp; \u0026nbsp;\u2003 \u0026lt;key\u0026gt;Settings\u0026lt;/key\u0026gt;\u003c/tt\u003e\u003cbr\u003e\u003ctt\u003e\u0026nbsp; \u2003\u0026nbsp;\u0026lt;dict\u0026gt;\u003c/tt\u003e\u003cbr\u003e\u003ctt\u003e\u0026nbsp; \u0026nbsp; \u0026nbsp;\u2003 \u0026nbsp; \u0026lt;key\u0026gt;full-chain-cert-verify\u0026lt;/key\u0026gt;\u003c/tt\u003e\u003cbr\u003e\u003ctt\u003e\u0026nbsp; \u0026nbsp; \u0026nbsp;\u2003 \u0026nbsp; \u0026lt;string\u0026gt;yes\u0026lt;/string\u0026gt;\u003cbr\u003e\u003c/tt\u003e\u0026nbsp; \u0026nbsp;\u2003\u0026lt;/dict\u0026gt;\u003cbr\u003e\u0026lt;/dict\u0026gt;\u003c/tt\u003e\u003c/li\u003e\u003c/ol\u003e\u003cb\u003e\u2003\u2003\u2003Workaround for new and existing GlobalProtect app installations on Linux\u003cbr\u003e\u003c/b\u003e\u2003\u2003\u2003\u2003\u20031. Create the /opt/paloaltonetworks/globalprotect/pangps.xml pre-deployment configuration file.\u003cbr\u003e\u2003\u2003\u2003\u2003\u20032. Add the pre-deployment settings to the pangps.xml file\u003cbr\u003e\u003ctt\u003e\u2003\u2003\u2003\u003cbr\u003e\u2003\u2003\u2003\u2003\u2003\u2003\u0026lt;GlobalProtect\u0026gt;\u003cbr\u003e\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u0026lt;Settings\u0026gt;\u003cbr\u003e\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u0026lt;full-chain-cert-verify\u0026gt;yes\u0026lt;/full-chain-cert-verify\u0026gt;\u003cbr\u003e\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u0026lt;/Settings\u003cbr\u003e\u2003\u2003\u2003\u2003\u2003\u2003\u0026lt;/GlobalProtect\u0026gt;\u003c/tt\u003e\u003cp\u003e\u003cbr\u003e\u003cb\u003e\u2003\u2003\u2003\u2003Workaround for new and existing GlobalProtect app installations on Android, iOS and ChromeOS\u003c/b\u003e\u003cbr\u003e\u2003\u2003\u2003\u2003Customers can use their endpoint mobile device management (MDM) tools to apply the following changes\u003cbr\u003e\u2003\u2003\u2003\u2003\u2003\u20031. Set the key \"full-chain-cert-verify\"=\"yes\".\u003c/p\u003e\u003cb\u003e\u003c/b\u003e"
            }
          ],
          "value": "Customers can mitigate the risk of this issue by taking either of the following three actions:\n\n\n 1. Enforce SSL-Only VPN Connections: Modify your GlobalProtect Portal configurations to disable IPSec/UDP tunneling, forcing the client applications to connect exclusively via SSL VPN mode. Customer can configure Connect with SSL Only (https://docs.paloaltonetworks.com/globalprotect/administration/globalprotect-portals/customize-the-globalprotect-app) tunnel by configuring \u0027 Advanced Control for Tunnel Mode Behavior\u0027 on GlobalProtect Portal Network \u003e Portal \u003e Agent Configuration\u003e Advanced Control for Tunnel Mode Behavior\n\n 2. Customers can configure SSL only tunnel protocol by un-checking \u0027Enable IPSec (https://docs.paloaltonetworks.com/ngfw/help/10-2/globalprotect/network-globalprotect-gateways/globalprotect-gateways-agent-tab/tunnel-settings-tab)\u0027 on GlobalProtect gateway at Network \u003e Gateway \u003e Agent \u003e Tunnel Setting \u003e Enable IPSec\n\n 3. Workaround  for new and existing GlobalProtect app \u003e= 6.2.8 or GlobalProtect app \u003e= 6.3.3 installations on Windows and macOS\n    GlobalProtect 6.2.8 and GlobalProtect app 6.3.3 on Windows and macOS introduce a new configuration Enable Strict Certificate Check (https://docs.paloaltonetworks.com/platform-explorer?productCategoryTags=pan%3Aproductcategory%2Fglobalprotect) which enables certificate checks required to mitigate this issue on Windows and macOS.\n    \n    This configuration only takes effect after the first connection between the GlobalProtect client and the GlobalProtect portal. Therefore the first connection is not protected. To ensure that the first connection is also protected, additionally follow the steps noted below for GlobalProtect \u003c 6.2.8.\n    This configuration option is currently not available for the GlobalProtect app on platforms other than Windows and macOS.\n    \n    Workaround for new and existing GlobalProtect app \u003c 6.2.8 or GlobalProtect app \u003c 6.3.3 installations on macOS\n    \n    \n    1. Use Xcode to edit the com.paloaltonetworks.GlobalProtect.settings.plist file (https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-apps/deploy-app-settings-transparently/deploy-app-settings-to-mac-endpoints/deploy-app-settings-in-the-mac-plist) in /Library/Preferences.\n    \n    2. Add a \"Settings\" section if it does not exist within the GlobalProtect section.\n    \n    3. Within the \"Settings\" section, add the full-chain-cert-verify key and set the string value to yes\n    \n    4.  Restart macOS.\n    \u2003\u003ckey\u003eGlobalProtect\u003c/key\u003e\n    \u2003\u003cdict\u003e\n      \u2003  (removed for brevity)\n       \u2003 \u003ckey\u003eSettings\u003c/key\u003e\n      \u2003 \u003cdict\u003e\n         \u2003   \u003ckey\u003efull-chain-cert-verify\u003c/key\u003e\n         \u2003   \u003cstring\u003eyes\u003c/string\u003e\n       \u2003\u003c/dict\u003e\n    \u003c/dict\u003e\n\n\u2003\u2003\u2003Workaround for new and existing GlobalProtect app installations on Linux\n\u2003\u2003\u2003\u2003\u20031. Create the /opt/paloaltonetworks/globalprotect/pangps.xml pre-deployment configuration file.\n\u2003\u2003\u2003\u2003\u20032. Add the pre-deployment settings to the pangps.xml file\n\u2003\u2003\u2003\n\u2003\u2003\u2003\u2003\u2003\u2003\u003cGlobalProtect\u003e\n\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u003cSettings\u003e\n\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u003cfull-chain-cert-verify\u003eyes\u003c/full-chain-cert-verify\u003e\n\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u003c/Settings\n\u2003\u2003\u2003\u2003\u2003\u2003\u003c/GlobalProtect\u003e\n\n\n\u2003\u2003\u2003\u2003Workaround for new and existing GlobalProtect app installations on Android, iOS and ChromeOS\n\u2003\u2003\u2003\u2003Customers can use their endpoint mobile device management (MDM) tools to apply the following changes\n\u2003\u2003\u2003\u2003\u2003\u20031. Set the key \"full-chain-cert-verify\"=\"yes\"."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.3",
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.9",
        "GlobalProtect App 6.2.8-c982",
        "GlobalProtect App 6.2.8-c948",
        "GlobalProtect App 6.2.8-c910",
        "GlobalProtect App 6.2.8-c471",
        "GlobalProtect App 6.2.8-c431",
        "GlobalProtect App 6.2.8-c416",
        "GlobalProtect App 6.2.8-c317",
        "GlobalProtect App 6.2.8-c263",
        "GlobalProtect App 6.2.8-c243",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.0.14",
        "GlobalProtect App 6.0.13",
        "GlobalProtect App 6.0.12",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_cpeGeneratedAt": "2026-08-12T02:10:58.171Z",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0297",
    "datePublished": "2026-08-13T02:01:13.682Z",
    "dateReserved": "2025-11-03T20:44:54.801Z",
    "dateUpdated": "2026-08-13T13:20:35.603Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0296 (GCVE-0-2026-0296)

Vulnerability from nvd – Published: 2026-08-13 01:59 – Updated: 2026-08-13 13:29

Title

GlobalProtect App: Improper Certificate Validation Bypass Vulnerability

Summary

Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. VPN tunnel traffic is not impacted. The GlobalProtect app on iOS, Android, and Chrome OS is not affected.

Severity

4.5 (Medium)


                        
                          CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-13 13:29 UTC

CWE

CWE-295 - Improper Certificate Validation

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0296	vendor-advisory

Impacted products

3 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h15 (custom) Affected: 6.2.0 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Linux::
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h14 (custom) Affected: 6.2.0 , < 6.2.8-h13 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Windows::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Chrome_OS::

Date Public

2026-08-12 16:00

Credits

our internal security research teams

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0296",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-13T13:29:34.520951Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-13T13:29:46.735Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Linux:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h15",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS",
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h14",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h14",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h13",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Chrome_OS:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h15",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:linux:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:ios:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:android:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:chrome_os:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "our internal security research teams"
        }
      ],
      "datePublic": "2026-08-12T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003c/p\u003e\u003cspan\u003eImproper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect\u2122 app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. VPN tunnel traffic is not impacted.\u003c/span\u003e\u003cb\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003c/b\u003e\u003cspan\u003eThe GlobalProtect app on iOS, Android, and Chrome OS is not affected.\u003c/span\u003e\u003cp\u003e\u003c/p\u003e"
            }
          ],
          "value": "Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect\u2122 app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. VPN tunnel traffic is not impacted.\n\nThe GlobalProtect app on iOS, Android, and Chrome OS is not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-94",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-94 Man in the Middle Attack"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "ADJACENT",
            "baseScore": 4.5,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-295",
              "description": "CWE-295 Improper Certificate Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T01:59:45.972Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0296"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\n  \u003cthead\u003e\n    \u003ctr\u003e\n      \u003cth\u003eVersion\u003c/th\u003e\n      \u003cth\u003eMinor Version\u003c/th\u003e\n      \u003cth\u003eSuggested Solution\u003c/th\u003e\n    \u003c/tr\u003e\n  \u003c/thead\u003e\n  \u003ctbody\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.3/6.2 on Linux\u003c/td\u003e\n      \u003ctd\u003e6.2.0 through 6.3.3-h14\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.3.3-h15 or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.0 on Linux\u003c/td\u003e\n      \u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.3 on macOS\u003c/td\u003e\n      \u003ctd\u003e6.3.0 through 6.3.3-h13\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.3.3-h14 (6.3.3-1121) or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.2 on macOS\u003c/td\u003e\n      \u003ctd\u003e6.2.0 through 6.2.8-h12\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.2.8-h13 (6.2.8-1045) or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.0 on macOS\u003c/td\u003e\n      \u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.3 on Windows\u003c/td\u003e\n      \u003ctd\u003e6.3.0 through 6.3.3-h13\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.3.3-h14 (6.3.3-1121) or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.2 on Windows\u003c/td\u003e\n      \u003ctd\u003e6.2.0 through 6.2.8-h12\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.2.8-h13 (6.2.8-1045) or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.0 on Windows\u003c/td\u003e\n      \u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App on iOS\u003c/td\u003e\n      \u003ctd\u003e\u003c/td\u003e\n      \u003ctd\u003eNo action needed.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App on Android\u003c/td\u003e\n      \u003ctd\u003e\u003c/td\u003e\n      \u003ctd\u003eNo action needed.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App on Chrome OS\u003c/td\u003e\n      \u003ctd\u003e\u003c/td\u003e\n      \u003ctd\u003eNo action needed.\u003c/td\u003e\n    \u003c/tr\u003e\n  \u003c/tbody\u003e\n\u003c/table\u003e"
            }
          ],
          "value": "VERSION                              MINOR VERSION             SUGGESTED SOLUTION\nGlobalProtect App 6.3/6.2 on Linux   6.2.0 through 6.3.3-h14   Upgrade to 6.3.3-h15 or later.\nGlobalProtect App 6.0 on Linux       6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3 on macOS       6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on macOS       6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.0 on macOS       6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3 on Windows     6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on Windows     6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.0 on Windows     6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App on iOS                                       No action needed.\nGlobalProtect App on Android                                   No action needed.\nGlobalProtect App on Chrome OS                                 No action needed."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "GlobalProtect App: Improper Certificate Validation Bypass Vulnerability",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No known workarounds or mitigations exist for this issue."
            }
          ],
          "value": "No known workarounds or mitigations exist for this issue."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.3",
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.9",
        "GlobalProtect App 6.2.8-c982",
        "GlobalProtect App 6.2.8-c948",
        "GlobalProtect App 6.2.8-c910",
        "GlobalProtect App 6.2.8-c471",
        "GlobalProtect App 6.2.8-c431",
        "GlobalProtect App 6.2.8-c416",
        "GlobalProtect App 6.2.8-c317",
        "GlobalProtect App 6.2.8-c263",
        "GlobalProtect App 6.2.8-c243",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.0.14",
        "GlobalProtect App 6.0.13",
        "GlobalProtect App 6.0.12",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_cpeGeneratedAt": "2026-08-12T02:10:58.092Z",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0296",
    "datePublished": "2026-08-13T01:59:45.972Z",
    "dateReserved": "2025-11-03T20:44:53.961Z",
    "dateUpdated": "2026-08-13T13:29:46.735Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0295 (GCVE-0-2026-0295)

Vulnerability from nvd – Published: 2026-08-13 01:57 – Updated: 2026-08-13 13:20

Title

GlobalProtect App: Local Privilege Escalation via Race Condition on macOS

Summary

A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root. The GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected.

Severity

4.1 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-13 03:55 UTC

CWE

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0295	vendor-advisory

Impacted products

2 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h14 (6.3.3-1121) (custom) Affected: 6.2.0 , < 6.2.8-h13 (6.2.8-1045) (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::macOS::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom)

Date Public

2026-08-12 16:00

Credits

Alex Bourla and Graham Brereton

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0295",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-13T03:55:55.918274Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-13T13:20:22.119Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:macOS:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h14",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h14 (6.3.3-1121)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h13 (6.2.8-1045)",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux",
            "Windows",
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14_6.3.3-1121_",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13_6.2.8-1045_",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:linux:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:windows:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:ios:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:android:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:chrome_os:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Alex Bourla and Graham Brereton"
        }
      ],
      "datePublic": "2026-08-12T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A race condition in the Palo Alto Networks GlobalProtect\u2122 client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root.\u003cbr\u003e\u003cbr\u003eThe GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected."
            }
          ],
          "value": "A race condition in the Palo Alto Networks GlobalProtect\u2122 client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root.\n\nThe GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-29",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-29 Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "LOCAL",
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-362",
              "description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T01:57:22.394Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0295"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3 on macOS\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.3.0 through 6.3.3-h13\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3-h14 (6.3.3-1121) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.2 on macOS\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through 6.2.8-h12\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.2.8-h13 (6.2.8-1045) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u0026nbsp;GlobalProtect App 6.0 on macOS\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Linux\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Chrome OS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                           MINOR VERSION             SUGGESTED SOLUTION\nGlobalProtect App 6.3 on macOS    6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on macOS    6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\n GlobalProtect App 6.0 on macOS   6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App on Linux                                  No action needed.\nGlobalProtect App on Windows                                No action needed.\nGlobalProtect App on iOS                                    No action needed.\nGlobalProtect App on Android                                No action needed.\nGlobalProtect App on Chrome OS                              No action needed."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "GlobalProtect App: Local Privilege Escalation via Race Condition on macOS",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No known workarounds or mitigations exist for this issue.\u0026nbsp;"
            }
          ],
          "value": "No known workarounds or mitigations exist for this issue."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.3",
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.0.14",
        "GlobalProtect App 6.0.13",
        "GlobalProtect App 6.0.12",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_cpeGeneratedAt": "2026-08-12T02:10:58.042Z",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0295",
    "datePublished": "2026-08-13T01:57:22.394Z",
    "dateReserved": "2025-11-03T20:44:53.142Z",
    "dateUpdated": "2026-08-13T13:20:22.119Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0267 (GCVE-0-2026-0267)

Vulnerability from nvd – Published: 2026-06-10 20:31 – Updated: 2026-06-11 14:41

Title

GlobalProtect App: Information Exposure Vulnerability on macOS

Summary

An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for disabling, disconnecting, or uninstalling the GlobalProtect app. After the passcode is known, the user can perform these actions even if the GlobalProtect app configuration would not normally permit them to do so.

Severity

4.4 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/AU:N/R:A/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-11 14:41 UTC

CWE

CWE-532 - Insertion of Sensitive Information into Log File

Assigner

palo_alto

References

2 references

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0267	vendor-advisory
https://security.paloaltonetworks.com/CVE-2024-8687	related

Impacted products

3 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h1 (custom) Affected: 6.2.0 , < 6.2.8-h2 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::macOS::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom)
Palo Alto Networks	GlobalProtect UWP App	Unaffected: All (custom)

Date Public

2026-06-10 16:00

Credits

Palo Alto Networks thanks one of our customers for discovering and reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0267",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-11T14:41:13.659641Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-11T14:41:21.436Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h1",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h1",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h2",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h2",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "Linux",
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "GlobalProtect UWP App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "This issue applies to GlobalProtect app deployments where the following feature is enabled on the GlobalProtect Portal configuration on PAN-OS firewalls or Panorama:\u003cbr\u003e\u003cul\u003e\u003cli\u003e\u003cb\u003eNetwork\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eGlobalProtect\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003ePortals\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003e(portal-config)\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eAgent\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003e(agent-config)\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eApp\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eAllow User to Uninstall GlobalProtect App\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eAllow with Password\u003c/b\u003e\u003c/li\u003e\u003c/ul\u003e"
            }
          ],
          "value": "This issue applies to GlobalProtect app deployments where the following feature is enabled on the GlobalProtect Portal configuration on PAN-OS firewalls or Panorama:\n\n * Network\u00a0\u003e GlobalProtect\u00a0\u003e Portals\u00a0\u003e (portal-config)\u00a0\u003e Agent\u00a0\u003e (agent-config)\u00a0\u003e App\u00a0\u003e Allow User to Uninstall GlobalProtect App\u00a0\u003e Allow with Password"
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.3.3-h1",
                  "versionStartIncluding": "6.3.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.2.8-h2",
                  "versionStartIncluding": "6.2.8",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Palo Alto Networks thanks one of our customers for discovering and reporting this issue."
        }
      ],
      "datePublic": "2026-06-10T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for disabling, disconnecting, or uninstalling the GlobalProtect app. After the passcode is known, the user can perform these actions even if the GlobalProtect app configuration would not normally permit them to do so."
            }
          ],
          "value": "An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for disabling, disconnecting, or uninstalling the GlobalProtect app. After the passcode is known, the user can perform these actions even if the GlobalProtect app configuration would not normally permit them to do so."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-155",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-155 Screen Temporary Files for Sensitive Information"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "AUTOMATIC",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/AU:N/R:A/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-532",
              "description": "CWE-532 Insertion of Sensitive Information into Log File",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-10T20:31:37.320Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0267"
        },
        {
          "tags": [
            "related"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2024-8687"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003c/th\u003e\u003cth\u003eMinor Version Range\u003c/th\u003e\u003cth\u003eSuggested Solution\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on macOS\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h1 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on macOS\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h1\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h2 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Windows\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNot Applicable\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Linux\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNot Applicable\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNot Applicable\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNot Applicable\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Chrome OS\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNot Applicable\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                          MINOR VERSION RANGE      SUGGESTED SOLUTION\nGlobalProtect App 6.3 on macOS   6.3.0 through 6.3.3      Upgrade to 6.3.3-h1 or later.\nGlobalProtect App 6.2 on macOS   6.2.0 through 6.2.8-h1   Upgrade to 6.2.8-h2 or later.\nGlobalProtect App on Windows                              Not Applicable\nGlobalProtect App on Linux                                Not Applicable\nGlobalProtect App on iOS                                  Not Applicable\nGlobalProtect App on Android                              Not Applicable\nGlobalProtect App on Chrome OS                            Not Applicable"
        }
      ],
      "source": {
        "discovery": "USER"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-06-10T16:00:00.000Z",
          "value": "Initial publication"
        }
      ],
      "title": "GlobalProtect App: Information Exposure Vulnerability on macOS",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "On the GlobalProtect Portal configuration on PAN-OS firewalls or Panorama, change the following setting (if enabled) to \"Disallow\":\u003cul\u003e\u003cli\u003e\u003cb\u003eNetwork\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eGlobalProtect\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003ePortals\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003e(portal-config)\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eAgent\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003e(agent-config)\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eApp\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eAllow User to Uninstall GlobalProtect App\u0026nbsp;\u0026gt; Disallow\u003c/b\u003e\u003c/li\u003e\u003c/ul\u003e"
            }
          ],
          "value": "On the GlobalProtect Portal configuration on PAN-OS firewalls or Panorama, change the following setting (if enabled) to \"Disallow\":\n * Network\u00a0\u003e GlobalProtect\u00a0\u003e Portals\u00a0\u003e (portal-config)\u00a0\u003e Agent\u00a0\u003e (agent-config)\u00a0\u003e App\u00a0\u003e Allow User to Uninstall GlobalProtect App\u00a0\u003e Disallow"
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.3",
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0267",
    "datePublished": "2026-06-10T20:31:37.320Z",
    "dateReserved": "2025-11-03T20:44:27.401Z",
    "dateUpdated": "2026-06-11T14:41:21.436Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0251 (GCVE-0-2026-0251)

Vulnerability from nvd – Published: 2026-05-13 18:20 – Updated: 2026-05-14 03:56

Title

GlobalProtect App: Local Privilege Escalation Vulnerabilities

Summary

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.

Severity

5.9 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-13 00:00 UTC

CWE

CWE-426 - Untrusted Search Path

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0251	vendor-advisory

Impacted products

4 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h9 (6.3.3-999) (custom) Affected: 6.2.0 , < 6.2.8-h10 (6.2.8-948) (custom) Affected: 6.0.0 , < 6.0.13 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Windows::
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h9 (6.3.3-999) (custom) Affected: 6.2.0 , < 6.2.8-h10 (6.2.8-948) (custom) Affected: 6.0.0 , < 6.0.13 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::macOS::
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h2 (6.3.3-42) (custom) Affected: 6.0.0 , < 6.0.11 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Linux::
Palo Alto Networks	Global Protect App	Unaffected: All (custom)

Date Public

2026-05-13 16:00

Credits

Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0251",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-13T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-14T03:56:34.668Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h9 (6.3.3-999)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h9 (6.3.3-999)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h10 (6.2.8-948)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h10 (6.2.8-948)",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.13",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:macOS:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h9 (6.3.3-999)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h9 (6.3.3-999)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h10 (6.2.8-948)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h10 (6.2.8-948)",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.13",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Linux:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h2 (6.3.3-42)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h2 (6.3.3-42)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.11",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.11",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Android",
            "ChromeOS",
            "iOS",
            "UWP"
          ],
          "product": "Global Protect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNo special configuration is required to be affected by this issue.\u003c/p\u003e"
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Windows:*:*",
                  "versionEndExcluding": "6.3.3-h9_(6.3.3-999)",
                  "versionStartIncluding": "6.3.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Windows:*:*",
                  "versionEndExcluding": "6.2.8-h10_(6.2.8-948)",
                  "versionStartIncluding": "6.2.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Windows:*:*",
                  "versionEndExcluding": "6.0.13",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.3.3-h9_(6.3.3-999)",
                  "versionStartIncluding": "6.3.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.2.8-h10_(6.2.8-948)",
                  "versionStartIncluding": "6.2.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.0.13",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Linux:*:*",
                  "versionEndExcluding": "6.3.3-h2_(6.3.3-42)",
                  "versionStartIncluding": "6.3.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Linux:*:*",
                  "versionEndExcluding": "6.0.11",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "other",
          "value": "Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue."
        }
      ],
      "datePublic": "2026-05-13T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eMultiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect\u2122 app allow a local user to escalate their privileges to NT AUTHORITY\\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges.\u003cbr\u003e\u003cbr\u003eThe GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.\u003c/p\u003e"
            }
          ],
          "value": "Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect\u2122 app allow a local user to escalate their privileges to NT AUTHORITY\\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges.\n\nThe GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003ePalo Alto Networks is not aware of any malicious exploitation of these issues.\u003c/p\u003e"
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of these issues."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-233 Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-426",
              "description": "CWE-426 Untrusted Search Path",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-13T18:20:01.156Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0251"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003c/th\u003e\u003cth\u003eMinor Version\u003c/th\u003e\u003cth\u003eSuggested Solution\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Windows\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on Windows\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h9\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h10 (6.2.8-948) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on Windows\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h8\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h9 (6.3.3-999) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on macOS\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on macOS\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h9\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h10 (6.2.8-948) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on macOS\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h8\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h9 (6.3.3-999) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Linux\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.10\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.11 or later\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on Linux\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.9\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h2 (6.3.3-42) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on Linux\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h1\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h2 (6.3.3-42) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Chrome OS\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on UWP\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                            MINOR VERSION            SUGGESTED SOLUTION\nGlobalProtect App 6.0 on Windows   6.0.0 through 6.0.12     Upgrade to 6.0.13 or later.\nGlobalProtect App 6.2 on Windows   6.2.0 through 6.2.8-h9   Upgrade to 6.2.8-h10 (6.2.8-948) or later.\nGlobalProtect App 6.3 on Windows   6.3.0 through 6.3.3-h8   Upgrade to 6.3.3-h9 (6.3.3-999) or later.\nGlobalProtect App 6.0 on macOS     6.0.0 through 6.0.12     Upgrade to 6.0.13 or later.\nGlobalProtect App 6.2 on macOS     6.2.0 through 6.2.8-h9   Upgrade to 6.2.8-h10 (6.2.8-948) or later.\nGlobalProtect App 6.3 on macOS     6.3.0 through 6.3.3-h8   Upgrade to 6.3.3-h9 (6.3.3-999) or later.\nGlobalProtect App 6.0 on Linux     6.0.0 through 6.0.10     Upgrade to 6.0.11 or later\nGlobalProtect App 6.2 on Linux     6.2.0 through 6.2.9      Upgrade to 6.3.3-h2 (6.3.3-42) or later.\nGlobalProtect App 6.3 on Linux     6.3.0 through 6.3.3-h1   Upgrade to 6.3.3-h2 (6.3.3-42) or later.\nGlobalProtect App on Android                                No action needed.\nGlobalProtect App on Chrome OS                              No action needed.\nGlobalProtect App on iOS                                    No action needed.\nGlobalProtect App on UWP                                    No action needed."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-05-13T16:00:00.000Z",
          "value": "Initial publication."
        }
      ],
      "title": "GlobalProtect App: Local Privilege Escalation Vulnerabilities",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNo known workarounds exist for this issue.\u003c/p\u003e"
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.0.12",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0251",
    "datePublished": "2026-05-13T18:20:01.156Z",
    "dateReserved": "2025-11-03T20:44:11.930Z",
    "dateUpdated": "2026-05-14T03:56:34.668Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0250 (GCVE-0-2026-0250)

Vulnerability from nvd – Published: 2026-05-13 18:26 – Updated: 2026-05-14 03:56

Title

GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway

Summary

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway. The GlobalProtect app on iOS is not affected.

Severity

5.2 (Medium)


                        
                          CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-13 00:00 UTC

CWE

CWE-787 - Out-of-bounds Write

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0250	vendor-advisory

Impacted products

7 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h9 (6.3.3-999) (custom) Affected: 6.2.0 , < 6.2.8-h10 (6.2.8-948) (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:::windows:::::* cpe:2.3:a:palo_alto_networks:globalprotect_app:::macos:::::* cpe:2.3:a:palo_alto_networks:globalprotect_app:::windows:::::* cpe:2.3:a:palo_alto_networks:globalprotect_app:::macos:::::*
Palo Alto Networks	GlobalProtect App	Affected: 6.1 , < 6.1.13 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:::android:::::* cpe:2.3:a:palo_alto_networks:globalprotect_app:::chrome_os:::::*
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h2 (6.3.3-42) (custom) Affected: 6.0.0 , < 6.0.11 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:::linux:::::* cpe:2.3:a:palo_alto_networks:globalprotect_app:::linux:::::*
Palo Alto Networks	GlobalProtect App	Affected: 6.0 , < 6.0.13 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:::windows:::::* cpe:2.3:a:palo_alto_networks:globalprotect_app:::macos:::::*
Palo Alto Networks	GlobalProtect App	Affected: 6.0 , < 6.0.14 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:::android:::::* cpe:2.3:a:palo_alto_networks:globalprotect_app:::chrome_os:::::*
Palo Alto Networks	GlobalProtect UWP App	Affected: 6.3 , < 6.3.3-h10 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_uwp_app:::windows:::::*
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom)

Date Public

2026-05-13 16:00

Credits

our internal security research teams

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0250",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-13T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-14T03:56:37.034Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "MacOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h9 (6.3.3-999)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h9 (6.3.3-999)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h10 (6.2.8-948)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h10 (6.2.8-948)",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.1.13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.1.13",
              "status": "affected",
              "version": "6.1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h2 (6.3.3-42)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h2 (6.3.3-42)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.11",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.11",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "MacOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.0.13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.13",
              "status": "affected",
              "version": "6.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.0.14",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.14",
              "status": "affected",
              "version": "6.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "GlobalProtect UWP App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h10",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h10",
              "status": "affected",
              "version": "6.3",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "iOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNo special configuration is required to be affected by this issue.\u003c/p\u003e"
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h9_6.3.3-999_",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h9_6.3.3-999_",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h10_6.2.8-948_",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h10_6.2.8-948_",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:android:*:*:*:*:*",
                  "versionEndExcluding": "6.1.13",
                  "versionStartIncluding": "6.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:chrome_os:*:*:*:*:*",
                  "versionEndExcluding": "6.1.13",
                  "versionStartIncluding": "6.1",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h2_6.3.3-42_",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.0.11",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.0.13",
                  "versionStartIncluding": "6.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.0.13",
                  "versionStartIncluding": "6.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:android:*:*:*:*:*",
                  "versionEndExcluding": "6.0.14",
                  "versionStartIncluding": "6.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:chrome_os:*:*:*:*:*",
                  "versionEndExcluding": "6.0.14",
                  "versionStartIncluding": "6.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_uwp_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h10",
                  "versionStartIncluding": "6.3",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:ios:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "other",
          "value": "our internal security research teams"
        }
      ],
      "datePublic": "2026-05-13T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect\u2122 app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway.\u003c/p\u003e\u003cp\u003eThe GlobalProtect app on iOS is not affected.\u003c/p\u003e"
            }
          ],
          "value": "A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect\u2122 app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway.\n\n\n\nThe GlobalProtect app on iOS is not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003ePalo Alto Networks is not aware of any malicious exploitation of this issue.\u003c/p\u003e"
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-540",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-540 Overread Buffers"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "ADJACENT",
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-13T18:26:51.927Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0250"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003c/th\u003e\u003cth\u003eMinor Version\u003c/th\u003e\u003cth\u003eSuggested Solution\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on Windows\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h8\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h9 (6.3.3-999) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on Windows\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h9\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h10 (6.2.8-948) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Windows\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Linux\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.10\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.11 or later.\u0026nbsp;\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2/6.3 on Linux\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.3.3-h1\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h2 (6.3.3-42) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on macOS\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h8\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h9 (6.3.3-999) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on macOS\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h9\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h10 (6.2.8-948) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on macOS\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on Android\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.1.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.1.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Android\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.13\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.14 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on ChromeOS\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.1.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.1.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on ChromeOS\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.13\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.14 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect UWP App\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.3.3-h9\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h10 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                              MINOR VERSION            SUGGESTED SOLUTION\nGlobalProtect App 6.3 on Windows     6.3.0 through 6.3.3-h8   Upgrade to 6.3.3-h9 (6.3.3-999) or later.\nGlobalProtect App 6.2 on Windows     6.2.0 through 6.2.8-h9   Upgrade to 6.2.8-h10 (6.2.8-948) or later.\nGlobalProtect App 6.0 on Windows     6.0.0 through 6.0.12     Upgrade to 6.0.13 or later.\nGlobalProtect App 6.0 on Linux       6.0.0 through 6.0.10     Upgrade to 6.0.11 or later. \nGlobalProtect App 6.2/6.3 on Linux   6.2.0 through 6.3.3-h1   Upgrade to 6.3.3-h2 (6.3.3-42) or later.\nGlobalProtect App 6.3 on macOS       6.3.0 through 6.3.3-h8   Upgrade to 6.3.3-h9 (6.3.3-999) or later.\nGlobalProtect App 6.2 on macOS       6.2.0 through 6.2.8-h9   Upgrade to 6.2.8-h10 (6.2.8-948) or later.\nGlobalProtect App 6.0 on macOS       6.0.0 through 6.0.12     Upgrade to 6.0.13 or later.\nGlobalProtect App 6.1 on Android     6.1.0 through 6.1.12     Upgrade to 6.1.13 or later.\nGlobalProtect App 6.0 on Android     6.0.0 through 6.0.13     Upgrade to 6.0.14 or later.\nGlobalProtect App 6.1 on ChromeOS    6.1.0 through 6.1.12     Upgrade to 6.1.13 or later.\nGlobalProtect App 6.0 on ChromeOS    6.0.0 through 6.0.13     Upgrade to 6.0.14 or later.\nGlobalProtect UWP App                6.1.0 through 6.3.3-h9   Upgrade to 6.3.3-h10 or later.\nGlobalProtect App on iOS                                      No action needed"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-05-13T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNo known workarounds exist for this issue.\u003c/p\u003e"
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0250",
    "datePublished": "2026-05-13T18:26:51.927Z",
    "dateReserved": "2025-11-03T20:44:11.022Z",
    "dateUpdated": "2026-05-14T03:56:37.034Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0249 (GCVE-0-2026-0249)

Vulnerability from nvd – Published: 2026-05-13 18:32 – Updated: 2026-05-15 09:57

Title

GlobalProtect App: Certificate Validation Bypass Vulnerabilities

Summary

Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacker to intercept encrypted communications and potentially compromise the endpoint. This can enable a local non-administrative operating system user or an attacker on the same subnet to redirect traffic to an unauthorized server and facilitate the installation of malicious software. The GlobalProtect app on Linux, Windows, iOS and GlobalProtect UWP app are not affected.

Severity

4.9 (Medium)


                        
                          CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-15 03:56 UTC

CWE

CWE-295 - Improper Certificate Validation

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0249	vendor-advisory

Impacted products

4 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h9 (6.3.3-999) (custom) Affected: 6.2.0 , < 6.2.8-h10 (6.2.8-948) (custom)
Palo Alto Networks	GlobalProtect App	Affected: 6.1.0 , < 6.1.13 (custom) Affected: 6.0.0 , < 6.0.14 (custom)
Palo Alto Networks	GlobalProtect App	Affected: 6.0.0 , < 6.0.13 (custom)
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom)

Date Public

2026-05-13 16:00

Credits

Palo Alto Networks thanks Kakao Corp. Service Security Team and our internal security research teams for discovering and reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0249",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-15T03:56:08.016080Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-15T09:57:30.206Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h9 (6.3.3-999)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h9 (6.3.3-999)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h10 (6.2.8-948)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h10 (6.2.8-948)",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Android",
            "ChromeOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.1.13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.1.13",
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.14",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.14",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.0.13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.13",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "Linux",
            "iOS",
            "Windows UWP"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eThe issue is applicable to the GlobalProtect app on macOS only if SAML authentication with an \u003ca href=\"https://docs.paloaltonetworks.com/globalprotect/administration/globalprotect-user-authentication/set-up-external-authentication/set-up-saml-authentication/enable-default-browser-for-saml-authentication-using-client-authentication-settings\"\u003eembedded browser is enabled\u003c/a\u003e. No special configuration is required for the GlobalProtect app on Android/Chrome OS to be affected by this issue.\u003c/p\u003e"
            }
          ],
          "value": "The issue is applicable to the GlobalProtect app on macOS only if SAML authentication with an embedded browser is enabled (https://docs.paloaltonetworks.com/globalprotect/administration/globalprotect-user-authentication/set-up-external-authentication/set-up-saml-authentication/enable-default-browser-for-saml-authentication-using-client-authentication-settings). No special configuration is required for the GlobalProtect app on Android/Chrome OS to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.3.3-h9_(6.3.3-999)",
                  "versionStartIncluding": "6.3.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.2.8-h10_(6.2.8-948)",
                  "versionStartIncluding": "6.2.8",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Android:*:*",
                  "versionEndExcluding": "6.1.13",
                  "versionStartIncluding": "6.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:ChromeOS:*:*",
                  "versionEndExcluding": "6.1.13",
                  "versionStartIncluding": "6.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Android:*:*",
                  "versionEndExcluding": "6.0.14",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:ChromeOS:*:*",
                  "versionEndExcluding": "6.0.14",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.0.13",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "other",
          "value": "Palo Alto Networks thanks Kakao Corp. Service Security Team and our internal security research teams for discovering and reporting this issue."
        }
      ],
      "datePublic": "2026-05-13T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eMultiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect\u2122 app enables an attacker to intercept encrypted communications and potentially compromise the endpoint. This can enable a local non-administrative operating system user or an attacker on the same subnet to redirect traffic to an unauthorized server and facilitate the installation of malicious software.\u003cbr\u003e\u003cbr\u003eThe GlobalProtect app on Linux, Windows, iOS and GlobalProtect UWP app are not affected.\u003c/p\u003e"
            }
          ],
          "value": "Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect\u2122 app enables an attacker to intercept encrypted communications and potentially compromise the endpoint. This can enable a local non-administrative operating system user or an attacker on the same subnet to redirect traffic to an unauthorized server and facilitate the installation of malicious software.\n\nThe GlobalProtect app on Linux, Windows, iOS and GlobalProtect UWP app are not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003ePalo Alto Networks is not aware of any malicious exploitation of these issues.\u003c/p\u003e"
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of these issues."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-94",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-94 Adversary in the Middle (AiTM)"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "ADJACENT",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-295",
              "description": "CWE-295 Improper Certificate Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-13T18:32:12.091Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0249"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003c/th\u003e\u003cth\u003eMinor Version\u003c/th\u003e\u003cth\u003eSuggested Solution\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on Android\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.1.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.1.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Android\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.13\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.14 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on Chrome OS\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.1.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.1.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Chrome OS\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.13\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.14 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on macOS\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h8\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h9 (6.3.3-999) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on macOS\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h9\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h10 (6.2.8-948) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on macOS\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Windows\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Linux\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on UWP\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "Version                              Minor Version            Suggested Solution\nGlobalProtect App 6.1 on Android     6.1.0 through 6.1.12     Upgrade to 6.1.13 or later.\nGlobalProtect App 6.0 on Android     6.0.0 through 6.0.13     Upgrade to 6.0.14 or later.\nGlobalProtect App 6.1 on Chrome OS   6.1.0 through 6.1.12     Upgrade to 6.1.13 or later.\nGlobalProtect App 6.0 on Chrome OS   6.0.0 through 6.0.13     Upgrade to 6.0.14 or later.\nGlobalProtect App 6.3 on macOS       6.3.0 through 6.3.3-h8   Upgrade to 6.3.3-h9 (6.3.3-999) or later.\nGlobalProtect App 6.2 on macOS       6.2.0 through 6.2.8-h9   Upgrade to 6.2.8-h10 (6.2.8-948) or later.\nGlobalProtect App 6.0 on macOS       6.0.0 through 6.0.12     Upgrade to 6.0.13 or later.\nGlobalProtect App on Windows                                  No action needed.\nGlobalProtect App on Linux                                    No action needed.\nGlobalProtect App on iOS                                      No action needed.\nGlobalProtect App on UWP                                      No action needed."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-05-13T16:00:00.000Z",
          "value": "Initial publication."
        }
      ],
      "title": "GlobalProtect App: Certificate Validation Bypass Vulnerabilities",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNo known workarounds exist for this issue.\u003c/p\u003e"
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0249",
    "datePublished": "2026-05-13T18:32:12.091Z",
    "dateReserved": "2025-11-03T20:44:09.928Z",
    "dateUpdated": "2026-05-15T09:57:30.206Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-2183 (GCVE-0-2025-2183)

Vulnerability from nvd – Published: 2025-08-13 17:05 – Updated: 2026-02-26 17:48

Title

GlobalProtect App: Improper Certificate Validation Leads to Privilege Escalation

Summary

An insufficient certificate validation issue in the Palo Alto Networks GlobalProtect™ app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root certificates on the endpoint and subsequently install malicious software signed by the malicious root certificates on that endpoint.

Severity

5.3 (Medium)


                        
                          CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:D/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-08-16 03:55 UTC

CWE

CWE-295 - Improper Certificate Validation

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2025-2183	vendor-advisory

Impacted products

4 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h2 (6.3.3-c676) (custom) Affected: 6.2.0 , < 6.2.8-h3 (6.2.8-c263) (custom) Affected: 6.1.0 (custom) Affected: 6.0.0 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.9:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Windows::
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3 (custom) Affected: 6.2.0 , < 11.1.10 (custom) Affected: 6.1.0 (custom) Affected: 6.0.0 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.9:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Linux::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom)
Palo Alto Networks	Global Protect UWP App	Unaffected: All (custom)

Date Public

2025-08-13 16:00

Credits

Nikola Markovic of Palo Alto Networks Maxime Escorbiac of Michelin CERT

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-2183",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-08-16T03:55:52.478514Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T17:48:39.832Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.9:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h2 (6.3.3-c676)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h2 (6.3.3-c676)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h3 (6.2.8-c263)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h3 (6.2.8-c263)",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.9:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Linux:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.1.10",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.1.10",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Android",
            "iOS",
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Global Protect UWP App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "GlobalProtect installations are impacted if either of the following conditions is true: \u003cb\u003e\u003cbr\u003e\u003c/b\u003e1.\u0026nbsp;The portal pushes certificates to the client, which are then used to validate the Portal or Gateway\u0027s certificate. These certificates are stored in the \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PNPRCA4\"\u003etca.cer\u003c/a\u003e file.  If the certificates listed in \"Trusted Root CA\" include the entire certificate chain for the Portal or Gateway certificate, the configuration will be vulnerable. \u003cb\u003e\u003cbr\u003e\u003cbr\u003e\u003c/b\u003e2. GlobalProtect app is deployed with the \u201cFULLCHAINCERTVERIFY\u201d option set to yes.\u0026nbsp;To learn more about this configuration, see the Solution section of this \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://security.paloaltonetworks.com/CVE-2024-5921\"\u003eadvisory\u003c/a\u003e."
            }
          ],
          "value": "GlobalProtect installations are impacted if either of the following conditions is true: \n1.\u00a0The portal pushes certificates to the client, which are then used to validate the Portal or Gateway\u0027s certificate. These certificates are stored in the  tca.cer https://knowledgebase.paloaltonetworks.com/KCSArticleDetail  file.  If the certificates listed in \"Trusted Root CA\" include the entire certificate chain for the Portal or Gateway certificate, the configuration will be vulnerable. \n\n2. GlobalProtect app is deployed with the \u201cFULLCHAINCERTVERIFY\u201d option set to yes.\u00a0To learn more about this configuration, see the Solution section of this  advisory https://security.paloaltonetworks.com/CVE-2024-5921 ."
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Nikola Markovic of Palo Alto Networks"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Maxime Escorbiac of Michelin CERT"
        }
      ],
      "datePublic": "2025-08-13T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An insufficient certificate validation issue in the Palo Alto Networks GlobalProtect\u2122 app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root certificates on the endpoint and subsequently install malicious software signed by the malicious root certificates on that endpoint."
            }
          ],
          "value": "An insufficient certificate validation issue in the Palo Alto Networks GlobalProtect\u2122 app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root certificates on the endpoint and subsequently install malicious software signed by the malicious root certificates on that endpoint."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-233 Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "PHYSICAL",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:D/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-295",
              "description": "CWE-295 Improper Certificate Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-13T17:05:08.612Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2025-2183"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.3.0 through 6.3.2\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.2-h9 or 6.3.3-h2 or later*.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.2 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through 6.2.8\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.2.8-h3 or later*.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on Windows\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h3 or 6.3.3-h2 or later*.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.0 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.2.8-h3 or 6.3.3-h2 or later*.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3 on Linux\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.3.0 through 6.3.2\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3 or later*.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on Linux\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3 or later*.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on Linux\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3 or later*.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Linux\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3 or later*.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android, iOS, macOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect UWP App\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003cbr\u003e* In addition to the software updates listed above, additional steps are required to protect against this vulnerability as described below:\u003cbr\u003e\u003cb\u003e\u003cbr\u003eSolution for new and existing GlobalProtect \u003c/b\u003e\u003cb\u003eapp installation on Windows / Linux\u003c/b\u003e\u003cbr\u003e\u003col\u003e\u003cli\u003eEnsure the portal/gateway certificate can be validated using the operating system\u0027s certificate store (e.g., Local Machine Certificate Store or Current User Certificate Store in Windows; for Linux, refer to this \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/6-2/globalprotect-app-user-guide/globalprotect-app-for-linux/support-for-native-certificate-store-for-prisma-access-and-globalprotect-app\"\u003edocumentation\u003c/a\u003e).\u003c/li\u003e\u003cli\u003eRemove any certificates associated with portal/gateway validation from the \"Trusted Root CA\" list on the Portal.\u0026nbsp;\u003c/li\u003e\u003cli\u003eEnable portal setting: \u201cEnable Strict Certificate Check\u201d (set FULLCHAINCERTVERIFY to yes).\u003cbr\u003e\u003c/li\u003e\u003c/ol\u003e"
            }
          ],
          "value": "Version\nMinor Version\nSuggested Solution\n\n                                    GlobalProtect App 6.3 on Windows\n\n                                    6.3.0 through 6.3.2\n                                    Upgrade to 6.3.2-h9 or 6.3.3-h2 or later*.\n                                \n                                    GlobalProtect App 6.2 on Windows\n\n                                    6.2.0 through 6.2.8\n                                    Upgrade to 6.2.8-h3 or later*.\n                                GlobalProtect App 6.1 on WindowsUpgrade to 6.2.8-h3 or 6.3.3-h2 or later*.\n                                    GlobalProtect App 6.0 on Windows\n\n                                    \n\n                                    Upgrade to 6.2.8-h3 or 6.3.3-h2 or later*.\n                                \n                                    GlobalProtect App 6.3 on Linux\n\n                                    6.3.0 through 6.3.2\n                                    Upgrade to 6.3.3 or later*.\n                                GlobalProtect App 6.2 on LinuxUpgrade to 6.3.3 or later*.GlobalProtect App 6.1 on LinuxUpgrade to 6.3.3 or later*.GlobalProtect App 6.0 on LinuxUpgrade to 6.3.3 or later*.GlobalProtect App on Android, iOS, macOS\nNo action needed.GlobalProtect UWP App\u00a0No action needed.\n* In addition to the software updates listed above, additional steps are required to protect against this vulnerability as described below:\n\nSolution for new and existing GlobalProtect app installation on Windows / Linux\n  *  Ensure the portal/gateway certificate can be validated using the operating system\u0027s certificate store (e.g., Local Machine Certificate Store or Current User Certificate Store in Windows; for Linux, refer to this  documentation https://docs.paloaltonetworks.com/globalprotect/6-2/globalprotect-app-user-guide/globalprotect-app-for-linux/support-for-native-certificate-store-for-prisma-access-and-globalprotect-app ).\n  *  Remove any certificates associated with portal/gateway validation from the \"Trusted Root CA\" list on the Portal.\u00a0\n  *  Enable portal setting: \u201cEnable Strict Certificate Check\u201d (set FULLCHAINCERTVERIFY to yes)."
        }
      ],
      "source": {
        "defect": [
          "GPC-22355"
        ],
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2025-08-13T16:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "GlobalProtect App: Improper Certificate Validation Leads to Privilege Escalation",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No known workarounds exist for this issue."
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.8-c243",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.1.9",
        "GlobalProtect App 6.1.7",
        "GlobalProtect App 6.1.6",
        "GlobalProtect App 6.1.5",
        "GlobalProtect App 6.1.4",
        "GlobalProtect App 6.1.3",
        "GlobalProtect App 6.1.2",
        "GlobalProtect App 6.1.1",
        "GlobalProtect App 6.1.0",
        "GlobalProtect App 6.1",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2025-2183",
    "datePublished": "2025-08-13T17:05:08.612Z",
    "dateReserved": "2025-03-10T17:56:25.934Z",
    "dateUpdated": "2026-02-26T17:48:39.832Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-2179 (GCVE-0-2025-2179)

Vulnerability from nvd – Published: 2025-07-29 17:15 – Updated: 2025-07-29 17:37

Title

GlobalProtect App: Non Admin User Can Disable the GlobalProtect App

Summary

An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on Linux devices enables a locally authenticated non administrative user to disable the app even if the GlobalProtect app configuration would not normally permit them to do so. The GlobalProtect app on Windows, macOS, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.

Severity

6.8 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-07-29 17:37 UTC

CWE

CWE-266 - Incorrect Privilege Assignment

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2025-2179	vendor-advisory

Impacted products

3 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.2.0 , < 6.2.9 (custom) Affected: 6.1.0 (custom) Affected: 6.0.0 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Linux::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom)
Palo Alto Networks	GlobalProtect UWP App	Unaffected: All (custom)

Date Public

2025-07-28 21:30

Credits

Alex Bourla Graham Brereton (graham.brereton@form3.tech)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-2179",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-29T17:37:10.712988Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-29T17:37:23.305Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Linux:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.2.9",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.9",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Android",
            "Chrome OS",
            "iOS",
            "Windows",
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "GlobalProtect UWP App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eYou are vulnerable to this issue if you have GlobalProtect configured with both of the following configurations:\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003col\u003e\u003cli\u003eConnect method set to \u0027Every time the user logs on to the machine (Always On)\u0027\u003c/li\u003e\u003cli\u003e\u0027Allow User to Disable GlobalProtect\u0027 set to either Disallow or \u0027Allow with Passcode\u0027\u003c/li\u003e\u003c/ol\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003eYou can verify if these configurations are enabled by either\u003c/p\u003e\u003col\u003e\u003cli\u003eNavigating to GlobalProtect \u0026gt; App Settings - GlobalProtect on the Strata Cloud Manager OR\u003c/li\u003e\u003cli\u003eNavigating to Network \u0026gt; GlobalProtect \u0026gt; Portals \u0026gt; Agent on Panorama or PAN-OS management web interface for directly-managed devices.\u003c/li\u003e\u003c/ol\u003e"
            }
          ],
          "value": "You are vulnerable to this issue if you have GlobalProtect configured with both of the following configurations:\n\n\n\n  *  Connect method set to \u0027Every time the user logs on to the machine (Always On)\u0027\n  *  \u0027Allow User to Disable GlobalProtect\u0027 set to either Disallow or \u0027Allow with Passcode\u0027\n\n\nYou can verify if these configurations are enabled by either\n\n  *  Navigating to GlobalProtect \u003e App Settings - GlobalProtect on the Strata Cloud Manager OR\n  *  Navigating to Network \u003e GlobalProtect \u003e Portals \u003e Agent on Panorama or PAN-OS management web interface for directly-managed devices."
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Alex Bourla"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Graham Brereton (graham.brereton@form3.tech)"
        }
      ],
      "datePublic": "2025-07-28T21:30:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect\u2122 App on Linux devices enables a locally authenticated non administrative user to disable the app even if the GlobalProtect app configuration would not normally permit them to do so.\u003cbr\u003e\u003cbr\u003eThe GlobalProtect app on Windows, macOS, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected."
            }
          ],
          "value": "An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect\u2122 App on Linux devices enables a locally authenticated non administrative user to disable the app even if the GlobalProtect app configuration would not normally permit them to do so.\n\nThe GlobalProtect app on Windows, macOS, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-578",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-578 Disable Security Software"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-266",
              "description": "CWE-266: Incorrect Privilege Assignment",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-29T17:15:08.461Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2025-2179"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.2 on Linux\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through 6.2.8\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.2.9 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on Linux\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.9 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Linux\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.9 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android, ChromeOS, iOS, macOS, Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "Version\nMinor Version\nSuggested Solution\n\n                                    GlobalProtect App 6.2 on Linux\n\n                                    6.2.0 through 6.2.8\n                                    Upgrade to 6.2.9 or later.\n                                GlobalProtect App 6.1 on LinuxUpgrade to 6.2.9 or later.GlobalProtect App 6.0 on LinuxUpgrade to 6.2.9 or later.GlobalProtect App on Android, ChromeOS, iOS, macOS, Windows\nNo action needed."
        }
      ],
      "source": {
        "defect": [
          "GPC-21751"
        ],
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2025-07-28T19:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "GlobalProtect App: Non Admin User Can Disable the GlobalProtect App",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No workaround or mitigation is available."
            }
          ],
          "value": "No workaround or mitigation is available."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.1.7",
        "GlobalProtect App 6.1.6",
        "GlobalProtect App 6.1.5",
        "GlobalProtect App 6.1.4",
        "GlobalProtect App 6.1.3",
        "GlobalProtect App 6.1.2",
        "GlobalProtect App 6.1.1",
        "GlobalProtect App 6.1.0",
        "GlobalProtect App 6.1",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2025-2179",
    "datePublished": "2025-07-29T17:15:08.461Z",
    "dateReserved": "2025-03-10T17:56:18.225Z",
    "dateUpdated": "2025-07-29T17:37:23.305Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-0141 (GCVE-0-2025-0141)

Vulnerability from nvd – Published: 2025-07-09 22:58 – Updated: 2026-02-26 17:50

Title

GlobalProtect App: Privilege Escalation (PE) Vulnerability

Summary

An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on enables a locally authenticated non administrative user to escalate their privileges to root on macOS and Linux or NT AUTHORITY\SYSTEM on Windows. The GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.

Severity

8.4 (High)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-07-10 03:56 UTC

CWE

CWE-426 - Untrusted Search Path

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2025-0141	vendor-advisory

Impacted products

4 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h1 (6.3.3-c650) (custom) Affected: 6.2.0 , < 6.2.8-h2 (6.2.8-c243) (custom) Affected: 6.1.0 (custom) Affected: 6.0.0 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Windows::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom)
Palo Alto Networks	GlobalProtect UWP App	Unaffected: All (custom)
Palo Alto Networks	GlobalProtect App	Affected: 6.2.0 , < 6.2.8 (custom) Affected: 6.1.0 (custom) Affected: 6.0.0 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Linux::

Date Public

2025-07-09 16:00

Credits

Alex Bourla Graham Brereton (graham.brereton@form3.tech)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-0141",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-10T03:56:03.900001Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T17:50:50.211Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS",
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h1 (6.3.3-c650)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h1 (6.3.3-c650)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h2 (6.2.8-c243)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h2 (6.2.8-c243)",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Android",
            "Chrome OS",
            "iOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "GlobalProtect UWP App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Linux:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.2.8",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be vulnerable to this issue."
            }
          ],
          "value": "No special configuration is required to be vulnerable to this issue."
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Alex Bourla"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Graham Brereton (graham.brereton@form3.tech)"
        }
      ],
      "datePublic": "2025-07-09T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect\u2122 App on enables a locally authenticated non administrative user to escalate their privileges to root on macOS and Linux or NT AUTHORITY\\SYSTEM on Windows.\u003cbr\u003e\u003cbr\u003eThe GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected."
            }
          ],
          "value": "An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect\u2122 App on enables a locally authenticated non administrative user to escalate their privileges to root on macOS and Linux or NT AUTHORITY\\SYSTEM on Windows.\n\nThe GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-233 Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-426",
              "description": "CWE-426 Untrusted Search Path",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-10T00:17:38.636Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2025-0141"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3 on macOS\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.3.0 through 6.3.3\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3-h1 (6.3.3-c650) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.3.0 through 6.3.3\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3-h1 (6.3.3-c650) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.2 on macOS\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through 6.2.8\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.2.8-h2 (6.2.8-c243) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.2 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through 6.2.8\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.2.8-h2 (6.2.8-c243) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on macOS\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h2 (6.2.8-c243) or 6.3.3-h1 (6.3.3-c650) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on Windows\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h2 (6.2.8-c243) or 6.3.3-h1 (6.3.3-c650) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on macOS\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h2 (6.2.8-c243) or 6.3.3-h1 (6.3.3-c650) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Windows\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h2 (6.2.8-c243) or 6.3.3-h1 (6.3.3-c650) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.2 on Linux\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through 6.2.7\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.2.8 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on Linux\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Linux\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u003cspan\u003eGlobalProtect App on Android, Chrome OS, iOS\u003c/span\u003e\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect UWP App\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "Version\nMinor Version\nSuggested Solution\n\n                                    GlobalProtect App 6.3 on macOS\n\n                                    6.3.0 through 6.3.3\n                                    Upgrade to 6.3.3-h1 (6.3.3-c650) or later.\n                                \n                                    GlobalProtect App 6.3 on Windows\n\n                                    6.3.0 through 6.3.3\n                                    Upgrade to 6.3.3-h1 (6.3.3-c650) or later.\n                                \n                                    GlobalProtect App 6.2 on macOS\n\n                                    6.2.0 through 6.2.8\n                                    Upgrade to 6.2.8-h2 (6.2.8-c243) or later.\n                                \n                                    GlobalProtect App 6.2 on Windows\n\n                                    6.2.0 through 6.2.8\n                                    Upgrade to 6.2.8-h2 (6.2.8-c243) or later.\n                                GlobalProtect App 6.1 on macOSUpgrade to 6.2.8-h2 (6.2.8-c243) or 6.3.3-h1 (6.3.3-c650) or later.GlobalProtect App 6.1 on WindowsUpgrade to 6.2.8-h2 (6.2.8-c243) or 6.3.3-h1 (6.3.3-c650) or later.GlobalProtect App 6.0 on macOSUpgrade to 6.2.8-h2 (6.2.8-c243) or 6.3.3-h1 (6.3.3-c650) or later.GlobalProtect App 6.0 on WindowsUpgrade to 6.2.8-h2 (6.2.8-c243) or 6.3.3-h1 (6.3.3-c650) or later.\n                                    GlobalProtect App 6.2 on Linux\n\n                                    6.2.0 through 6.2.7\n                                    Upgrade to 6.2.8 or later.\n                                GlobalProtect App 6.1 on LinuxUpgrade to 6.2.8 or later.GlobalProtect App 6.0 on LinuxUpgrade to 6.2.8 or later.GlobalProtect App on Android, Chrome OS, iOS\u00a0No action needed.GlobalProtect UWP App\nNo action needed."
        }
      ],
      "source": {
        "defect": [
          "GPC-21586"
        ],
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2025-07-09T16:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "GlobalProtect App: Privilege Escalation (PE) Vulnerability",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No workaround or mitigation is available."
            }
          ],
          "value": "No workaround or mitigation is available."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.1.7",
        "GlobalProtect App 6.1.6",
        "GlobalProtect App 6.1.5",
        "GlobalProtect App 6.1.4",
        "GlobalProtect App 6.1.3",
        "GlobalProtect App 6.1.2",
        "GlobalProtect App 6.1.1",
        "GlobalProtect App 6.1.0",
        "GlobalProtect App 6.1",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2025-0141",
    "datePublished": "2025-07-09T22:58:54.755Z",
    "dateReserved": "2024-12-20T23:24:48.571Z",
    "dateUpdated": "2026-02-26T17:50:50.211Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-0140 (GCVE-0-2025-0140)

Vulnerability from nvd – Published: 2025-07-09 22:58 – Updated: 2025-07-30 18:02

Title

GlobalProtect App: Non Admin User Can Disable the GlobalProtect App

Summary

An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non administrative user to disable the app even if the GlobalProtect app configuration would not normally permit them to do so. The GlobalProtect app on Windows, Linux, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.

Severity

6.8 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-07-10 20:01 UTC

CWE

CWE-266 - Incorrect Privilege Assignment

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2025-0140	vendor-advisory

Impacted products

3 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h1 (6.3.3-c650) (custom) Affected: 6.2.0 , < 6.2.8-h2 (6.2.8-c243) (custom) Affected: 6.1.0 (custom) Affected: 6.0.0 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::macOS::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom)
Palo Alto Networks	GlobalProtect UWP App	Unaffected: All (custom)

Date Public

2025-07-09 16:00

Credits

Alex Bourla Graham Brereton (graham.brereton@form3.tech)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-0140",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-10T20:01:37.338207Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-10T20:01:46.749Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:macOS:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h1 (6.3.3-c650)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h1 (6.3.3-c650)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h2 (6.2.8-c243)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h2 (6.2.8-c243)",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Android",
            "Chrome OS",
            "iOS",
            "Windows",
            "Linux"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "GlobalProtect UWP App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be vulnerable to this issue."
            }
          ],
          "value": "No special configuration is required to be vulnerable to this issue."
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Alex Bourla"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Graham Brereton (graham.brereton@form3.tech)"
        }
      ],
      "datePublic": "2025-07-09T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect\u2122 App on macOS devices enables a locally authenticated non administrative user to disable the app even if the GlobalProtect app configuration would not normally permit them to do so.\u003cbr\u003e\u003cbr\u003eThe GlobalProtect app on Windows, Linux, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected."
            }
          ],
          "value": "An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect\u2122 App on macOS devices enables a locally authenticated non administrative user to disable the app even if the GlobalProtect app configuration would not normally permit them to do so.\n\nThe GlobalProtect app on Windows, Linux, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-578",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-578 Disable Security Software"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-266",
              "description": "CWE-266: Incorrect Privilege Assignment",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-30T18:02:00.810Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2025-0140"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3 on macOS\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.3.0 through 6.3.3\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3-h1 (6.3.3-c650) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.2 on macOS\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through 6.2.8\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.2.8-h2 (6.2.8-c243) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on macOS\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h2 (6.2.8-c243) or 6.3.3-h1 (6.3.3-c650) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on macOS\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h2 (6.2.8-c243) or 6.3.3-h1 (6.3.3-c650) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android, iOS, Linux, Windows\u0026nbsp;\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect UWP App\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "Version\nMinor Version\nSuggested Solution\n\n                                    GlobalProtect App 6.3 on macOS\n\n                                    6.3.0 through 6.3.3\n                                    Upgrade to 6.3.3-h1 (6.3.3-c650) or later.\n                                \n                                    GlobalProtect App 6.2 on macOS\n\n                                    6.2.0 through 6.2.8\n                                    Upgrade to 6.2.8-h2 (6.2.8-c243) or later.\n                                GlobalProtect App 6.1 on macOSUpgrade to 6.2.8-h2 (6.2.8-c243) or 6.3.3-h1 (6.3.3-c650) or later.GlobalProtect App 6.0 on macOSUpgrade to 6.2.8-h2 (6.2.8-c243) or 6.3.3-h1 (6.3.3-c650) or later.GlobalProtect App on Android, iOS, Linux, Windows\u00a0\u00a0No action needed.GlobalProtect UWP App\nNo action needed."
        }
      ],
      "source": {
        "defect": [
          "GPC-21585"
        ],
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2025-07-09T16:00:00.000Z",
          "value": "Initial Publication"
        },
        {
          "lang": "en",
          "time": "2025-07-28T21:30:00.000Z",
          "value": "Decoupled GlobalProtect Linux app from this advisory. For Linux, see CVE-2025-2179"
        }
      ],
      "title": "GlobalProtect App: Non Admin User Can Disable the GlobalProtect App",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No workaround or mitigation is available."
            }
          ],
          "value": "No workaround or mitigation is available."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.1.7",
        "GlobalProtect App 6.1.6",
        "GlobalProtect App 6.1.5",
        "GlobalProtect App 6.1.4",
        "GlobalProtect App 6.1.3",
        "GlobalProtect App 6.1.2",
        "GlobalProtect App 6.1.1",
        "GlobalProtect App 6.1.0",
        "GlobalProtect App 6.1",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2025-0140",
    "datePublished": "2025-07-09T22:58:28.536Z",
    "dateReserved": "2024-12-20T23:24:43.326Z",
    "dateUpdated": "2025-07-30T18:02:00.810Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2026-0299 (GCVE-0-2026-0299)

Vulnerability from cvelistv5 – Published: 2026-08-13 02:04 – Updated: 2026-08-13 13:21

Title

GlobalProtect App: Local Privilege Escalation Vulnerabilities

Summary

Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on iOS, Android, and Chrome OS is not affected.

Severity

5.9 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-13 03:55 UTC

CWE

CWE-426 - Untrusted Search Path

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0299	vendor-advisory

Impacted products

3 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h15 (custom) Affected: 6.2.0 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Linux::
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h14 (custom) Affected: 6.2.0 , < 6.2.8-h13 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Windows::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom)

Date Public

2026-08-12 16:00

Credits

our internal security research teams

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0299",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-13T03:55:52.857599Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-13T13:21:02.891Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Linux:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h15",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS",
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h14",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h14",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h13",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h15",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:linux:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:ios:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:android:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:chrome_os:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "our internal security research teams"
        }
      ],
      "datePublic": "2026-08-12T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect\u2122 app enable a local user to escalate their privileges to NT AUTHORITY\\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges.\u003cbr\u003e\u003cbr\u003eThe GlobalProtect app on iOS, Android, and Chrome OS is not affected."
            }
          ],
          "value": "Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect\u2122 app enable a local user to escalate their privileges to NT AUTHORITY\\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges.\n\nThe GlobalProtect app on iOS, Android, and Chrome OS is not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-233 Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-426",
              "description": "CWE-426 Untrusted Search Path",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T02:04:07.275Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0299"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3/6.2 on Linux\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through 6.3.3-h14\u003cbr\u003e \u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3-h15 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Linux\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3 on macOS\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.3.0 through\u0026nbsp;6.3.3-h13\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3-h14\u0026nbsp;\u003cspan\u003e(6.3.3-1121) \u003c/span\u003e or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.3.0 through\u0026nbsp;6.3.3-h13\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3-h14 \u003cspan\u003e(6.3.3-1121) \u003c/span\u003eor later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.2 on macOS\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through\u0026nbsp;6.2.8-h12\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.2.8-h13\u0026nbsp;(6.2.8-1045) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.2 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through\u0026nbsp;6.2.8-h12\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.2.8-h13  (6.2.8-1045) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.0 on macOS\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.0 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Chrome OS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                              MINOR VERSION             SUGGESTED SOLUTION\nGlobalProtect App 6.3/6.2 on Linux   6.2.0 through 6.3.3-h14   Upgrade to 6.3.3-h15 or later.\nGlobalProtect App 6.0 on Linux       6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3 on macOS       6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.3 on Windows     6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on macOS       6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.2 on Windows     6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.0 on macOS       6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.0 on Windows     6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App on iOS                                       No action needed.\nGlobalProtect App on Android                                   No action needed.\nGlobalProtect App on Chrome OS                                 No action needed."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "GlobalProtect App: Local Privilege Escalation Vulnerabilities",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No known workarounds exist for this issue."
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.3",
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.9",
        "GlobalProtect App 6.2.8-c982",
        "GlobalProtect App 6.2.8-c948",
        "GlobalProtect App 6.2.8-c910",
        "GlobalProtect App 6.2.8-c471",
        "GlobalProtect App 6.2.8-c431",
        "GlobalProtect App 6.2.8-c416",
        "GlobalProtect App 6.2.8-c317",
        "GlobalProtect App 6.2.8-c263",
        "GlobalProtect App 6.2.8-c243",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.0.14",
        "GlobalProtect App 6.0.13",
        "GlobalProtect App 6.0.12",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0299",
    "datePublished": "2026-08-13T02:04:07.275Z",
    "dateReserved": "2025-11-03T20:44:57.175Z",
    "dateUpdated": "2026-08-13T13:21:02.891Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0298 (GCVE-0-2026-0298)

Vulnerability from cvelistv5 – Published: 2026-08-13 02:02 – Updated: 2026-08-13 13:20

Title

GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)

Summary

An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on an affected client. The GlobalProtect app on Linux, macOS, iOS, Android, and Chrome OS is not affected.

Severity

5.2 (Medium)


                        
                          CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-13 03:55 UTC

CWE

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0298	vendor-advisory

Impacted products

2 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h14 (custom) Affected: 6.2.0 , < 6.2.8-h13 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Windows::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom)

Date Public

2026-08-12 16:00

Credits

our internal security research teams

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0298",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-13T03:55:53.877148Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-13T13:20:48.963Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h14",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h14",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h13",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux",
            "macOS",
            "Android",
            "Chrome OS",
            "iOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cspan\u003eThis issue is applicable only to devices configured to use SAML authentication in the GlobalProtect\u003c/span\u003e \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-user-guide/globalprotect-app-for-windows/use-connect-before-logon-followed-by-the-authentication-method\"\u003e\u003cspan\u003eConnect Before Logon\u003c/span\u003e\u003c/a\u003e\u003cspan\u003e feature.\u003c/span\u003e\u003c/p\u003e"
            }
          ],
          "value": "This issue is applicable only to devices configured to use SAML authentication in the GlobalProtect Connect Before Logon (https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-user-guide/globalprotect-app-for-windows/use-connect-before-logon-followed-by-the-authentication-method) feature."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:linux:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:macos:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:android:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:chrome_os:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:ios:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "our internal security research teams"
        }
      ],
      "datePublic": "2026-08-12T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect\u2122 app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on an affected client.\u003cbr\u003e\u003cbr\u003eThe GlobalProtect app on Linux, macOS, iOS, Android, and Chrome OS  is not affected."
            }
          ],
          "value": "An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect\u2122 app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on an affected client.\n\nThe GlobalProtect app on Linux, macOS, iOS, Android, and Chrome OS  is not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-242",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-242 Code Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "ADJACENT",
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T02:02:47.196Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0298"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.3.0 through 6.3.3-h13\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3-h14\u0026nbsp;(6.3.3-1121) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.2 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through 6.2.8-h12\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.2.8-h13\u0026nbsp;(6.2.8-1045) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.0 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App All on macOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App All on Linux\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App All on iOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App All on Android\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App All on Chrome OS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                              MINOR VERSION             SUGGESTED SOLUTION\nGlobalProtect App 6.3 on Windows     6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on Windows     6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.0 on Windows     6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App All on macOS                                 No action needed.\nGlobalProtect App All on Linux                                 No action needed.\nGlobalProtect App All on iOS                                   No action needed.\nGlobalProtect App All on Android                               No action needed.\nGlobalProtect App All on Chrome OS                             No action needed."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cspan\u003eCustomers can mitigate the risk of this issue by taking either of the following actions:\u003c/span\u003e\u003c/p\u003e\u003col\u003e\u003cli\u003e\u003cp\u003e\u003cspan\u003eUse\u0026nbsp;\u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-user-guide/globalprotect-app-for-windows/use-connect-before-logon-followed-by-the-authentication-method\"\u003e\u003cspan\u003eConnect Before Logon (CBL\u003c/span\u003e\u003c/a\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-user-guide/globalprotect-app-for-windows/use-connect-before-logon-followed-by-the-authentication-method\"\u003e\u003cspan\u003e)\u003c/span\u003e\u003c/a\u003e\u0026nbsp;\u003cspan\u003ewithout SAML Authentication\u003c/span\u003e\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003e\u003cspan\u003eUse\u0026nbsp;\u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/administration/globalprotect-quick-configs/remote-access-vpn-with-pre-logon\"\u003e\u003cspan\u003ePre-logon with machine certificate\u003c/span\u003e\u003c/a\u003e\u0026nbsp;\u003cspan\u003einstead of Connect Before Logon (CBL).\u003c/span\u003e\u003c/p\u003e\u003c/li\u003e\u003c/ol\u003e"
            }
          ],
          "value": "Customers can mitigate the risk of this issue by taking either of the following actions:\n\n 1. Use Connect Before Logon (CBL (https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-user-guide/globalprotect-app-for-windows/use-connect-before-logon-followed-by-the-authentication-method)) (https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-user-guide/globalprotect-app-for-windows/use-connect-before-logon-followed-by-the-authentication-method) without SAML Authentication\n\n 2. Use Pre-logon with machine certificate (https://docs.paloaltonetworks.com/globalprotect/administration/globalprotect-quick-configs/remote-access-vpn-with-pre-logon) instead of Connect Before Logon (CBL)."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.3",
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.0.14",
        "GlobalProtect App 6.0.13",
        "GlobalProtect App 6.0.12",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_cpeGeneratedAt": "2026-08-12T02:10:58.226Z",
      "x_cpeManuallyEdited": true,
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0298",
    "datePublished": "2026-08-13T02:02:47.196Z",
    "dateReserved": "2025-11-03T20:44:56.118Z",
    "dateUpdated": "2026-08-13T13:20:48.963Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0297 (GCVE-0-2026-0297)

Vulnerability from cvelistv5 – Published: 2026-08-13 02:01 – Updated: 2026-08-13 13:20

Title

GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake

Summary

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man-in-the-middle (MitM) attacker or a rogue gateway to disrupt system processes and potentially execute arbitrary code with elevated privileges (SYSTEM privileges on Windows, and root privileges on macOS and Linux).

Severity

5.2 (Medium)


                        
                          CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-13 03:55 UTC

CWE

CWE-787 - Out-of-bounds Write

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0297	vendor-advisory

Impacted products

3 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h15 (custom) Affected: 6.2.0 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Linux::
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h14 (custom) Affected: 6.2.0 , < 6.2.8-h13 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Windows::
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.5 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Chrome_OS::

Date Public

2026-08-12 16:00

Credits

our internal security research teams

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0297",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-13T03:55:54.896353Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-13T13:20:35.603Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Linux:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h15",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS",
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h14",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h14",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h13",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Chrome_OS:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.5",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.5",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003eNo special configuration is required to be affected by this issue.\u003c/span\u003e"
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h15",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:linux:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:ios:*:*:*:*:*",
                  "versionEndExcluding": "6.3.5",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:android:*:*:*:*:*",
                  "versionEndExcluding": "6.3.5",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:chrome_os:*:*:*:*:*",
                  "versionEndExcluding": "6.3.5",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:ios:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:android:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:chrome_os:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "our internal security research teams"
        }
      ],
      "datePublic": "2026-08-12T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect\u2122 app that enables a man-in-the-middle (MitM) attacker or a rogue gateway to disrupt system processes and potentially execute arbitrary code with elevated privileges (SYSTEM privileges on Windows, and root privileges on macOS and Linux). \u003c/p\u003e"
            }
          ],
          "value": "A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect\u2122 app that enables a man-in-the-middle (MitM) attacker or a rogue gateway to disrupt system processes and potentially execute arbitrary code with elevated privileges (SYSTEM privileges on Windows, and root privileges on macOS and Linux)."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-540",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-540 Overread Buffers"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "ADJACENT",
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T02:01:13.682Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0297"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3/6.2 on Linux\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through 6.3.3-h14\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3-h15 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Linux\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on macOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h13\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h14\u0026nbsp;(6.3.3-1121) or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on macOS\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h12\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h13\u0026nbsp;(6.2.8-1045) or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on macOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h13\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h14 (6.3.3-1121) or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h12\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h13 (6.2.8-1045) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u0026nbsp;\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3/6.1 on iOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.3.4\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.5 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on iOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3/6.1 on Android\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.3.4\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.5 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Android\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3/6.1 on ChromeOS\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.3.4\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.5 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on ChromeOS\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                                 MINOR VERSION             SUGGESTED SOLUTION\nGlobalProtect App 6.3/6.2 on Linux      6.2.0 through 6.3.3-h14   Upgrade to 6.3.3-h15 or later.\nGlobalProtect App 6.0 on Linux          6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3 on macOS          6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on macOS          6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.0 on macOS          6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3 on Windows        6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on Windows        6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.0 on Windows        6.0.0 through 6.0.14      Upgrade to 6.0.15 or later. \nGlobalProtect App 6.3/6.1 on iOS        6.1.0 through 6.3.4       Upgrade to 6.3.5 or later.\nGlobalProtect App 6.0 on iOS            6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3/6.1 on Android    6.1.0 through 6.3.4       Upgrade to 6.3.5 or later.\nGlobalProtect App 6.0 on Android        6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3/6.1 on ChromeOS   6.1.0 through 6.3.4       Upgrade to 6.3.5 or later.\nGlobalProtect App 6.0 on ChromeOS       6.0.0 through 6.0.14      Upgrade to 6.0.15 or later."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eCustomers can mitigate the risk of this issue by taking either of the following three actions:\u003cbr\u003e\u003c/p\u003e\u003col\u003e\u003cli\u003e\u003cp\u003eEnforce SSL-Only VPN Connections:\u0026nbsp;Modify your GlobalProtect Portal configurations to disable IPSec/UDP tunneling, forcing the client applications to connect exclusively via SSL VPN mode.\u0026nbsp;Customer can configure \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/administration/globalprotect-portals/customize-the-globalprotect-app\"\u003eConnect with SSL Only\u003c/a\u003e tunnel by configuring \u0027 Advanced Control for Tunnel Mode Behavior\u0027 on GlobalProtect Portal Network \u0026gt; Portal \u0026gt; Agent Configuration\u0026gt;  Advanced Control for Tunnel Mode Behavior\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eCustomers can configure SSL only tunnel protocol by un-checking \u0027\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/ngfw/help/10-2/globalprotect/network-globalprotect-gateways/globalprotect-gateways-agent-tab/tunnel-settings-tab\"\u003eEnable IPSec\u003c/a\u003e\u0027  on GlobalProtect gateway at\u003cb\u003e\u0026nbsp;\u003c/b\u003e\u003cb\u003eNetwork\u003c/b\u003e \u0026gt; \u003cb\u003eGateway\u003c/b\u003e\u003cb\u003e \u003c/b\u003e\u0026gt;\u003cb\u003e \u003c/b\u003e\u003cb\u003eAgent \u003c/b\u003e\u0026gt; \u003cb\u003eTunnel Setting\u003c/b\u003e \u0026gt; \u003cb\u003eEnable IPSec\u003c/b\u003e\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003e\u003cb\u003eWorkaround\u0026nbsp; for new and existing GlobalProtect app \u0026gt;= 6.2.8 or GlobalProtect app \u0026gt;= 6.3.3 installations on Windows and macOS\u003c/b\u003e \u003cbr\u003eGlobalProtect 6.2.8 and GlobalProtect app 6.3.3 on Windows and macOS introduce a new configuration\u0026nbsp;\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/platform-explorer?productCategoryTags=pan%3Aproductcategory%2Fglobalprotect\"\u003eEnable Strict Certificate Check\u003c/a\u003e which enables certificate checks required to mitigate this issue on Windows and macOS.\u003cbr\u003e\u003cbr\u003eThis configuration only takes effect after the first connection between the GlobalProtect client and the GlobalProtect portal. Therefore the first connection is not protected. To ensure that the first connection is also protected, additionally follow the steps noted below for GlobalProtect \u0026lt; 6.2.8.\u003cbr\u003eThis configuration option is currently not available for the GlobalProtect app on platforms other than Windows and macOS.\u003cbr\u003e\u003cbr\u003e\u003cb\u003eWorkaround for new and existing GlobalProtect app \u0026lt; 6.2.8 or GlobalProtect app \u0026lt; 6.3.3 installations on macOS\u003c/b\u003e\u003cbr\u003e\u003cb\u003e\u003c/b\u003e\u003c/p\u003e\u003col\u003e\u003cli\u003e\u003cp\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-apps/deploy-app-settings-transparently/deploy-app-settings-to-mac-endpoints/deploy-app-settings-in-the-mac-plist\"\u003eUse Xcode to edit the com.paloaltonetworks.GlobalProtect.settings.plist file\u003c/a\u003e\u0026nbsp;in /Library/Preferences.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eAdd a \"Settings\" section if it does not exist within the GlobalProtect section.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eWithin the \"Settings\" section, add the full-chain-cert-verify key and set the string value to yes\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003e\u0026nbsp;Restart macOS.\u003c/p\u003e\u003c/li\u003e\u003c/ol\u003e\u003ctt\u003e\u003ctt\u003e\u2003\u0026lt;key\u0026gt;GlobalProtect\u0026lt;/key\u0026gt;\u003c/tt\u003e\u003cbr\u003e\u003ctt\u003e\u2003\u0026lt;dict\u0026gt;\u003c/tt\u003e\u003cbr\u003e\u003ctt\u003e\u003ctt\u003e\u0026nbsp; \u2003\u0026nbsp; (removed for brevity)\u003c/tt\u003e\u003c/tt\u003e\u003cbr\u003e\u003ctt\u003e\u0026nbsp; \u0026nbsp;\u2003 \u0026lt;key\u0026gt;Settings\u0026lt;/key\u0026gt;\u003c/tt\u003e\u003cbr\u003e\u003ctt\u003e\u0026nbsp; \u2003\u0026nbsp;\u0026lt;dict\u0026gt;\u003c/tt\u003e\u003cbr\u003e\u003ctt\u003e\u0026nbsp; \u0026nbsp; \u0026nbsp;\u2003 \u0026nbsp; \u0026lt;key\u0026gt;full-chain-cert-verify\u0026lt;/key\u0026gt;\u003c/tt\u003e\u003cbr\u003e\u003ctt\u003e\u0026nbsp; \u0026nbsp; \u0026nbsp;\u2003 \u0026nbsp; \u0026lt;string\u0026gt;yes\u0026lt;/string\u0026gt;\u003cbr\u003e\u003c/tt\u003e\u0026nbsp; \u0026nbsp;\u2003\u0026lt;/dict\u0026gt;\u003cbr\u003e\u0026lt;/dict\u0026gt;\u003c/tt\u003e\u003c/li\u003e\u003c/ol\u003e\u003cb\u003e\u2003\u2003\u2003Workaround for new and existing GlobalProtect app installations on Linux\u003cbr\u003e\u003c/b\u003e\u2003\u2003\u2003\u2003\u20031. Create the /opt/paloaltonetworks/globalprotect/pangps.xml pre-deployment configuration file.\u003cbr\u003e\u2003\u2003\u2003\u2003\u20032. Add the pre-deployment settings to the pangps.xml file\u003cbr\u003e\u003ctt\u003e\u2003\u2003\u2003\u003cbr\u003e\u2003\u2003\u2003\u2003\u2003\u2003\u0026lt;GlobalProtect\u0026gt;\u003cbr\u003e\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u0026lt;Settings\u0026gt;\u003cbr\u003e\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u0026lt;full-chain-cert-verify\u0026gt;yes\u0026lt;/full-chain-cert-verify\u0026gt;\u003cbr\u003e\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u0026lt;/Settings\u003cbr\u003e\u2003\u2003\u2003\u2003\u2003\u2003\u0026lt;/GlobalProtect\u0026gt;\u003c/tt\u003e\u003cp\u003e\u003cbr\u003e\u003cb\u003e\u2003\u2003\u2003\u2003Workaround for new and existing GlobalProtect app installations on Android, iOS and ChromeOS\u003c/b\u003e\u003cbr\u003e\u2003\u2003\u2003\u2003Customers can use their endpoint mobile device management (MDM) tools to apply the following changes\u003cbr\u003e\u2003\u2003\u2003\u2003\u2003\u20031. Set the key \"full-chain-cert-verify\"=\"yes\".\u003c/p\u003e\u003cb\u003e\u003c/b\u003e"
            }
          ],
          "value": "Customers can mitigate the risk of this issue by taking either of the following three actions:\n\n\n 1. Enforce SSL-Only VPN Connections: Modify your GlobalProtect Portal configurations to disable IPSec/UDP tunneling, forcing the client applications to connect exclusively via SSL VPN mode. Customer can configure Connect with SSL Only (https://docs.paloaltonetworks.com/globalprotect/administration/globalprotect-portals/customize-the-globalprotect-app) tunnel by configuring \u0027 Advanced Control for Tunnel Mode Behavior\u0027 on GlobalProtect Portal Network \u003e Portal \u003e Agent Configuration\u003e Advanced Control for Tunnel Mode Behavior\n\n 2. Customers can configure SSL only tunnel protocol by un-checking \u0027Enable IPSec (https://docs.paloaltonetworks.com/ngfw/help/10-2/globalprotect/network-globalprotect-gateways/globalprotect-gateways-agent-tab/tunnel-settings-tab)\u0027 on GlobalProtect gateway at Network \u003e Gateway \u003e Agent \u003e Tunnel Setting \u003e Enable IPSec\n\n 3. Workaround  for new and existing GlobalProtect app \u003e= 6.2.8 or GlobalProtect app \u003e= 6.3.3 installations on Windows and macOS\n    GlobalProtect 6.2.8 and GlobalProtect app 6.3.3 on Windows and macOS introduce a new configuration Enable Strict Certificate Check (https://docs.paloaltonetworks.com/platform-explorer?productCategoryTags=pan%3Aproductcategory%2Fglobalprotect) which enables certificate checks required to mitigate this issue on Windows and macOS.\n    \n    This configuration only takes effect after the first connection between the GlobalProtect client and the GlobalProtect portal. Therefore the first connection is not protected. To ensure that the first connection is also protected, additionally follow the steps noted below for GlobalProtect \u003c 6.2.8.\n    This configuration option is currently not available for the GlobalProtect app on platforms other than Windows and macOS.\n    \n    Workaround for new and existing GlobalProtect app \u003c 6.2.8 or GlobalProtect app \u003c 6.3.3 installations on macOS\n    \n    \n    1. Use Xcode to edit the com.paloaltonetworks.GlobalProtect.settings.plist file (https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-apps/deploy-app-settings-transparently/deploy-app-settings-to-mac-endpoints/deploy-app-settings-in-the-mac-plist) in /Library/Preferences.\n    \n    2. Add a \"Settings\" section if it does not exist within the GlobalProtect section.\n    \n    3. Within the \"Settings\" section, add the full-chain-cert-verify key and set the string value to yes\n    \n    4.  Restart macOS.\n    \u2003\u003ckey\u003eGlobalProtect\u003c/key\u003e\n    \u2003\u003cdict\u003e\n      \u2003  (removed for brevity)\n       \u2003 \u003ckey\u003eSettings\u003c/key\u003e\n      \u2003 \u003cdict\u003e\n         \u2003   \u003ckey\u003efull-chain-cert-verify\u003c/key\u003e\n         \u2003   \u003cstring\u003eyes\u003c/string\u003e\n       \u2003\u003c/dict\u003e\n    \u003c/dict\u003e\n\n\u2003\u2003\u2003Workaround for new and existing GlobalProtect app installations on Linux\n\u2003\u2003\u2003\u2003\u20031. Create the /opt/paloaltonetworks/globalprotect/pangps.xml pre-deployment configuration file.\n\u2003\u2003\u2003\u2003\u20032. Add the pre-deployment settings to the pangps.xml file\n\u2003\u2003\u2003\n\u2003\u2003\u2003\u2003\u2003\u2003\u003cGlobalProtect\u003e\n\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u003cSettings\u003e\n\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u003cfull-chain-cert-verify\u003eyes\u003c/full-chain-cert-verify\u003e\n\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u003c/Settings\n\u2003\u2003\u2003\u2003\u2003\u2003\u003c/GlobalProtect\u003e\n\n\n\u2003\u2003\u2003\u2003Workaround for new and existing GlobalProtect app installations on Android, iOS and ChromeOS\n\u2003\u2003\u2003\u2003Customers can use their endpoint mobile device management (MDM) tools to apply the following changes\n\u2003\u2003\u2003\u2003\u2003\u20031. Set the key \"full-chain-cert-verify\"=\"yes\"."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.3",
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.9",
        "GlobalProtect App 6.2.8-c982",
        "GlobalProtect App 6.2.8-c948",
        "GlobalProtect App 6.2.8-c910",
        "GlobalProtect App 6.2.8-c471",
        "GlobalProtect App 6.2.8-c431",
        "GlobalProtect App 6.2.8-c416",
        "GlobalProtect App 6.2.8-c317",
        "GlobalProtect App 6.2.8-c263",
        "GlobalProtect App 6.2.8-c243",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.0.14",
        "GlobalProtect App 6.0.13",
        "GlobalProtect App 6.0.12",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_cpeGeneratedAt": "2026-08-12T02:10:58.171Z",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0297",
    "datePublished": "2026-08-13T02:01:13.682Z",
    "dateReserved": "2025-11-03T20:44:54.801Z",
    "dateUpdated": "2026-08-13T13:20:35.603Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0296 (GCVE-0-2026-0296)

Vulnerability from cvelistv5 – Published: 2026-08-13 01:59 – Updated: 2026-08-13 13:29

Title

GlobalProtect App: Improper Certificate Validation Bypass Vulnerability

Summary

Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. VPN tunnel traffic is not impacted. The GlobalProtect app on iOS, Android, and Chrome OS is not affected.

Severity

4.5 (Medium)


                        
                          CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-13 13:29 UTC

CWE

CWE-295 - Improper Certificate Validation

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0296	vendor-advisory

Impacted products

3 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h15 (custom) Affected: 6.2.0 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Linux::
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h14 (custom) Affected: 6.2.0 , < 6.2.8-h13 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Windows::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Chrome_OS::

Date Public

2026-08-12 16:00

Credits

our internal security research teams

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0296",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-13T13:29:34.520951Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-13T13:29:46.735Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Linux:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h15",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS",
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h14",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h14",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h13",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Chrome_OS:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h15",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:linux:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:ios:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:android:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:chrome_os:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "our internal security research teams"
        }
      ],
      "datePublic": "2026-08-12T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003c/p\u003e\u003cspan\u003eImproper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect\u2122 app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. VPN tunnel traffic is not impacted.\u003c/span\u003e\u003cb\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003c/b\u003e\u003cspan\u003eThe GlobalProtect app on iOS, Android, and Chrome OS is not affected.\u003c/span\u003e\u003cp\u003e\u003c/p\u003e"
            }
          ],
          "value": "Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect\u2122 app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. VPN tunnel traffic is not impacted.\n\nThe GlobalProtect app on iOS, Android, and Chrome OS is not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-94",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-94 Man in the Middle Attack"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "ADJACENT",
            "baseScore": 4.5,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-295",
              "description": "CWE-295 Improper Certificate Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T01:59:45.972Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0296"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\n  \u003cthead\u003e\n    \u003ctr\u003e\n      \u003cth\u003eVersion\u003c/th\u003e\n      \u003cth\u003eMinor Version\u003c/th\u003e\n      \u003cth\u003eSuggested Solution\u003c/th\u003e\n    \u003c/tr\u003e\n  \u003c/thead\u003e\n  \u003ctbody\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.3/6.2 on Linux\u003c/td\u003e\n      \u003ctd\u003e6.2.0 through 6.3.3-h14\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.3.3-h15 or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.0 on Linux\u003c/td\u003e\n      \u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.3 on macOS\u003c/td\u003e\n      \u003ctd\u003e6.3.0 through 6.3.3-h13\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.3.3-h14 (6.3.3-1121) or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.2 on macOS\u003c/td\u003e\n      \u003ctd\u003e6.2.0 through 6.2.8-h12\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.2.8-h13 (6.2.8-1045) or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.0 on macOS\u003c/td\u003e\n      \u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.3 on Windows\u003c/td\u003e\n      \u003ctd\u003e6.3.0 through 6.3.3-h13\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.3.3-h14 (6.3.3-1121) or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.2 on Windows\u003c/td\u003e\n      \u003ctd\u003e6.2.0 through 6.2.8-h12\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.2.8-h13 (6.2.8-1045) or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.0 on Windows\u003c/td\u003e\n      \u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App on iOS\u003c/td\u003e\n      \u003ctd\u003e\u003c/td\u003e\n      \u003ctd\u003eNo action needed.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App on Android\u003c/td\u003e\n      \u003ctd\u003e\u003c/td\u003e\n      \u003ctd\u003eNo action needed.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App on Chrome OS\u003c/td\u003e\n      \u003ctd\u003e\u003c/td\u003e\n      \u003ctd\u003eNo action needed.\u003c/td\u003e\n    \u003c/tr\u003e\n  \u003c/tbody\u003e\n\u003c/table\u003e"
            }
          ],
          "value": "VERSION                              MINOR VERSION             SUGGESTED SOLUTION\nGlobalProtect App 6.3/6.2 on Linux   6.2.0 through 6.3.3-h14   Upgrade to 6.3.3-h15 or later.\nGlobalProtect App 6.0 on Linux       6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3 on macOS       6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on macOS       6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.0 on macOS       6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3 on Windows     6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on Windows     6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.0 on Windows     6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App on iOS                                       No action needed.\nGlobalProtect App on Android                                   No action needed.\nGlobalProtect App on Chrome OS                                 No action needed."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "GlobalProtect App: Improper Certificate Validation Bypass Vulnerability",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No known workarounds or mitigations exist for this issue."
            }
          ],
          "value": "No known workarounds or mitigations exist for this issue."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.3",
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.9",
        "GlobalProtect App 6.2.8-c982",
        "GlobalProtect App 6.2.8-c948",
        "GlobalProtect App 6.2.8-c910",
        "GlobalProtect App 6.2.8-c471",
        "GlobalProtect App 6.2.8-c431",
        "GlobalProtect App 6.2.8-c416",
        "GlobalProtect App 6.2.8-c317",
        "GlobalProtect App 6.2.8-c263",
        "GlobalProtect App 6.2.8-c243",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.0.14",
        "GlobalProtect App 6.0.13",
        "GlobalProtect App 6.0.12",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_cpeGeneratedAt": "2026-08-12T02:10:58.092Z",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0296",
    "datePublished": "2026-08-13T01:59:45.972Z",
    "dateReserved": "2025-11-03T20:44:53.961Z",
    "dateUpdated": "2026-08-13T13:29:46.735Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0295 (GCVE-0-2026-0295)

Vulnerability from cvelistv5 – Published: 2026-08-13 01:57 – Updated: 2026-08-13 13:20

Title

GlobalProtect App: Local Privilege Escalation via Race Condition on macOS

Summary

A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root. The GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected.

Severity

4.1 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-13 03:55 UTC

CWE

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0295	vendor-advisory

Impacted products

2 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h14 (6.3.3-1121) (custom) Affected: 6.2.0 , < 6.2.8-h13 (6.2.8-1045) (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::macOS::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom)

Date Public

2026-08-12 16:00

Credits

Alex Bourla and Graham Brereton

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0295",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-13T03:55:55.918274Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-13T13:20:22.119Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:macOS:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h14",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h14 (6.3.3-1121)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h13 (6.2.8-1045)",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux",
            "Windows",
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14_6.3.3-1121_",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13_6.2.8-1045_",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:linux:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:windows:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:ios:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:android:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:chrome_os:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Alex Bourla and Graham Brereton"
        }
      ],
      "datePublic": "2026-08-12T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A race condition in the Palo Alto Networks GlobalProtect\u2122 client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root.\u003cbr\u003e\u003cbr\u003eThe GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected."
            }
          ],
          "value": "A race condition in the Palo Alto Networks GlobalProtect\u2122 client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root.\n\nThe GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-29",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-29 Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "LOCAL",
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-362",
              "description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T01:57:22.394Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0295"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3 on macOS\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.3.0 through 6.3.3-h13\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3-h14 (6.3.3-1121) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.2 on macOS\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through 6.2.8-h12\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.2.8-h13 (6.2.8-1045) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u0026nbsp;GlobalProtect App 6.0 on macOS\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Linux\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Chrome OS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                           MINOR VERSION             SUGGESTED SOLUTION\nGlobalProtect App 6.3 on macOS    6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on macOS    6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\n GlobalProtect App 6.0 on macOS   6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App on Linux                                  No action needed.\nGlobalProtect App on Windows                                No action needed.\nGlobalProtect App on iOS                                    No action needed.\nGlobalProtect App on Android                                No action needed.\nGlobalProtect App on Chrome OS                              No action needed."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "GlobalProtect App: Local Privilege Escalation via Race Condition on macOS",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No known workarounds or mitigations exist for this issue.\u0026nbsp;"
            }
          ],
          "value": "No known workarounds or mitigations exist for this issue."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.3",
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.0.14",
        "GlobalProtect App 6.0.13",
        "GlobalProtect App 6.0.12",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_cpeGeneratedAt": "2026-08-12T02:10:58.042Z",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0295",
    "datePublished": "2026-08-13T01:57:22.394Z",
    "dateReserved": "2025-11-03T20:44:53.142Z",
    "dateUpdated": "2026-08-13T13:20:22.119Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0267 (GCVE-0-2026-0267)

Vulnerability from cvelistv5 – Published: 2026-06-10 20:31 – Updated: 2026-06-11 14:41

Title

GlobalProtect App: Information Exposure Vulnerability on macOS

Summary

An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for disabling, disconnecting, or uninstalling the GlobalProtect app. After the passcode is known, the user can perform these actions even if the GlobalProtect app configuration would not normally permit them to do so.

Severity

4.4 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/AU:N/R:A/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-11 14:41 UTC

CWE

CWE-532 - Insertion of Sensitive Information into Log File

Assigner

palo_alto

References

2 references

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0267	vendor-advisory
https://security.paloaltonetworks.com/CVE-2024-8687	related

Impacted products

3 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h1 (custom) Affected: 6.2.0 , < 6.2.8-h2 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::macOS::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom)
Palo Alto Networks	GlobalProtect UWP App	Unaffected: All (custom)

Date Public

2026-06-10 16:00

Credits

Palo Alto Networks thanks one of our customers for discovering and reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0267",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-11T14:41:13.659641Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-11T14:41:21.436Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h1",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h1",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h2",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h2",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "Linux",
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "GlobalProtect UWP App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "This issue applies to GlobalProtect app deployments where the following feature is enabled on the GlobalProtect Portal configuration on PAN-OS firewalls or Panorama:\u003cbr\u003e\u003cul\u003e\u003cli\u003e\u003cb\u003eNetwork\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eGlobalProtect\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003ePortals\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003e(portal-config)\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eAgent\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003e(agent-config)\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eApp\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eAllow User to Uninstall GlobalProtect App\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eAllow with Password\u003c/b\u003e\u003c/li\u003e\u003c/ul\u003e"
            }
          ],
          "value": "This issue applies to GlobalProtect app deployments where the following feature is enabled on the GlobalProtect Portal configuration on PAN-OS firewalls or Panorama:\n\n * Network\u00a0\u003e GlobalProtect\u00a0\u003e Portals\u00a0\u003e (portal-config)\u00a0\u003e Agent\u00a0\u003e (agent-config)\u00a0\u003e App\u00a0\u003e Allow User to Uninstall GlobalProtect App\u00a0\u003e Allow with Password"
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.3.3-h1",
                  "versionStartIncluding": "6.3.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.2.8-h2",
                  "versionStartIncluding": "6.2.8",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Palo Alto Networks thanks one of our customers for discovering and reporting this issue."
        }
      ],
      "datePublic": "2026-06-10T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for disabling, disconnecting, or uninstalling the GlobalProtect app. After the passcode is known, the user can perform these actions even if the GlobalProtect app configuration would not normally permit them to do so."
            }
          ],
          "value": "An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for disabling, disconnecting, or uninstalling the GlobalProtect app. After the passcode is known, the user can perform these actions even if the GlobalProtect app configuration would not normally permit them to do so."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-155",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-155 Screen Temporary Files for Sensitive Information"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "AUTOMATIC",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/AU:N/R:A/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-532",
              "description": "CWE-532 Insertion of Sensitive Information into Log File",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-10T20:31:37.320Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0267"
        },
        {
          "tags": [
            "related"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2024-8687"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003c/th\u003e\u003cth\u003eMinor Version Range\u003c/th\u003e\u003cth\u003eSuggested Solution\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on macOS\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h1 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on macOS\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h1\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h2 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Windows\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNot Applicable\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Linux\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNot Applicable\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNot Applicable\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNot Applicable\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Chrome OS\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNot Applicable\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                          MINOR VERSION RANGE      SUGGESTED SOLUTION\nGlobalProtect App 6.3 on macOS   6.3.0 through 6.3.3      Upgrade to 6.3.3-h1 or later.\nGlobalProtect App 6.2 on macOS   6.2.0 through 6.2.8-h1   Upgrade to 6.2.8-h2 or later.\nGlobalProtect App on Windows                              Not Applicable\nGlobalProtect App on Linux                                Not Applicable\nGlobalProtect App on iOS                                  Not Applicable\nGlobalProtect App on Android                              Not Applicable\nGlobalProtect App on Chrome OS                            Not Applicable"
        }
      ],
      "source": {
        "discovery": "USER"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-06-10T16:00:00.000Z",
          "value": "Initial publication"
        }
      ],
      "title": "GlobalProtect App: Information Exposure Vulnerability on macOS",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "On the GlobalProtect Portal configuration on PAN-OS firewalls or Panorama, change the following setting (if enabled) to \"Disallow\":\u003cul\u003e\u003cli\u003e\u003cb\u003eNetwork\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eGlobalProtect\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003ePortals\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003e(portal-config)\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eAgent\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003e(agent-config)\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eApp\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eAllow User to Uninstall GlobalProtect App\u0026nbsp;\u0026gt; Disallow\u003c/b\u003e\u003c/li\u003e\u003c/ul\u003e"
            }
          ],
          "value": "On the GlobalProtect Portal configuration on PAN-OS firewalls or Panorama, change the following setting (if enabled) to \"Disallow\":\n * Network\u00a0\u003e GlobalProtect\u00a0\u003e Portals\u00a0\u003e (portal-config)\u00a0\u003e Agent\u00a0\u003e (agent-config)\u00a0\u003e App\u00a0\u003e Allow User to Uninstall GlobalProtect App\u00a0\u003e Disallow"
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.3",
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0267",
    "datePublished": "2026-06-10T20:31:37.320Z",
    "dateReserved": "2025-11-03T20:44:27.401Z",
    "dateUpdated": "2026-06-11T14:41:21.436Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0249 (GCVE-0-2026-0249)

Vulnerability from cvelistv5 – Published: 2026-05-13 18:32 – Updated: 2026-05-15 09:57

Title

GlobalProtect App: Certificate Validation Bypass Vulnerabilities

Summary

Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacker to intercept encrypted communications and potentially compromise the endpoint. This can enable a local non-administrative operating system user or an attacker on the same subnet to redirect traffic to an unauthorized server and facilitate the installation of malicious software. The GlobalProtect app on Linux, Windows, iOS and GlobalProtect UWP app are not affected.

Severity

4.9 (Medium)


                        
                          CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-15 03:56 UTC

CWE

CWE-295 - Improper Certificate Validation

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0249	vendor-advisory

Impacted products

4 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h9 (6.3.3-999) (custom) Affected: 6.2.0 , < 6.2.8-h10 (6.2.8-948) (custom)
Palo Alto Networks	GlobalProtect App	Affected: 6.1.0 , < 6.1.13 (custom) Affected: 6.0.0 , < 6.0.14 (custom)
Palo Alto Networks	GlobalProtect App	Affected: 6.0.0 , < 6.0.13 (custom)
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom)

Date Public

2026-05-13 16:00

Credits

Palo Alto Networks thanks Kakao Corp. Service Security Team and our internal security research teams for discovering and reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0249",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-15T03:56:08.016080Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-15T09:57:30.206Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h9 (6.3.3-999)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h9 (6.3.3-999)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h10 (6.2.8-948)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h10 (6.2.8-948)",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Android",
            "ChromeOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.1.13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.1.13",
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.14",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.14",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.0.13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.13",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "Linux",
            "iOS",
            "Windows UWP"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eThe issue is applicable to the GlobalProtect app on macOS only if SAML authentication with an \u003ca href=\"https://docs.paloaltonetworks.com/globalprotect/administration/globalprotect-user-authentication/set-up-external-authentication/set-up-saml-authentication/enable-default-browser-for-saml-authentication-using-client-authentication-settings\"\u003eembedded browser is enabled\u003c/a\u003e. No special configuration is required for the GlobalProtect app on Android/Chrome OS to be affected by this issue.\u003c/p\u003e"
            }
          ],
          "value": "The issue is applicable to the GlobalProtect app on macOS only if SAML authentication with an embedded browser is enabled (https://docs.paloaltonetworks.com/globalprotect/administration/globalprotect-user-authentication/set-up-external-authentication/set-up-saml-authentication/enable-default-browser-for-saml-authentication-using-client-authentication-settings). No special configuration is required for the GlobalProtect app on Android/Chrome OS to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.3.3-h9_(6.3.3-999)",
                  "versionStartIncluding": "6.3.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.2.8-h10_(6.2.8-948)",
                  "versionStartIncluding": "6.2.8",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Android:*:*",
                  "versionEndExcluding": "6.1.13",
                  "versionStartIncluding": "6.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:ChromeOS:*:*",
                  "versionEndExcluding": "6.1.13",
                  "versionStartIncluding": "6.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Android:*:*",
                  "versionEndExcluding": "6.0.14",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:ChromeOS:*:*",
                  "versionEndExcluding": "6.0.14",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.0.13",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "other",
          "value": "Palo Alto Networks thanks Kakao Corp. Service Security Team and our internal security research teams for discovering and reporting this issue."
        }
      ],
      "datePublic": "2026-05-13T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eMultiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect\u2122 app enables an attacker to intercept encrypted communications and potentially compromise the endpoint. This can enable a local non-administrative operating system user or an attacker on the same subnet to redirect traffic to an unauthorized server and facilitate the installation of malicious software.\u003cbr\u003e\u003cbr\u003eThe GlobalProtect app on Linux, Windows, iOS and GlobalProtect UWP app are not affected.\u003c/p\u003e"
            }
          ],
          "value": "Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect\u2122 app enables an attacker to intercept encrypted communications and potentially compromise the endpoint. This can enable a local non-administrative operating system user or an attacker on the same subnet to redirect traffic to an unauthorized server and facilitate the installation of malicious software.\n\nThe GlobalProtect app on Linux, Windows, iOS and GlobalProtect UWP app are not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003ePalo Alto Networks is not aware of any malicious exploitation of these issues.\u003c/p\u003e"
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of these issues."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-94",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-94 Adversary in the Middle (AiTM)"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "ADJACENT",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-295",
              "description": "CWE-295 Improper Certificate Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-13T18:32:12.091Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0249"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003c/th\u003e\u003cth\u003eMinor Version\u003c/th\u003e\u003cth\u003eSuggested Solution\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on Android\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.1.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.1.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Android\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.13\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.14 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on Chrome OS\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.1.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.1.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Chrome OS\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.13\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.14 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on macOS\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h8\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h9 (6.3.3-999) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on macOS\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h9\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h10 (6.2.8-948) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on macOS\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Windows\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Linux\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on UWP\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "Version                              Minor Version            Suggested Solution\nGlobalProtect App 6.1 on Android     6.1.0 through 6.1.12     Upgrade to 6.1.13 or later.\nGlobalProtect App 6.0 on Android     6.0.0 through 6.0.13     Upgrade to 6.0.14 or later.\nGlobalProtect App 6.1 on Chrome OS   6.1.0 through 6.1.12     Upgrade to 6.1.13 or later.\nGlobalProtect App 6.0 on Chrome OS   6.0.0 through 6.0.13     Upgrade to 6.0.14 or later.\nGlobalProtect App 6.3 on macOS       6.3.0 through 6.3.3-h8   Upgrade to 6.3.3-h9 (6.3.3-999) or later.\nGlobalProtect App 6.2 on macOS       6.2.0 through 6.2.8-h9   Upgrade to 6.2.8-h10 (6.2.8-948) or later.\nGlobalProtect App 6.0 on macOS       6.0.0 through 6.0.12     Upgrade to 6.0.13 or later.\nGlobalProtect App on Windows                                  No action needed.\nGlobalProtect App on Linux                                    No action needed.\nGlobalProtect App on iOS                                      No action needed.\nGlobalProtect App on UWP                                      No action needed."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-05-13T16:00:00.000Z",
          "value": "Initial publication."
        }
      ],
      "title": "GlobalProtect App: Certificate Validation Bypass Vulnerabilities",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNo known workarounds exist for this issue.\u003c/p\u003e"
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0249",
    "datePublished": "2026-05-13T18:32:12.091Z",
    "dateReserved": "2025-11-03T20:44:09.928Z",
    "dateUpdated": "2026-05-15T09:57:30.206Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0250 (GCVE-0-2026-0250)

Vulnerability from cvelistv5 – Published: 2026-05-13 18:26 – Updated: 2026-05-14 03:56

Title

GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway

Summary

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway. The GlobalProtect app on iOS is not affected.

Severity

5.2 (Medium)


                        
                          CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-13 00:00 UTC

CWE

CWE-787 - Out-of-bounds Write

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0250	vendor-advisory

Impacted products

7 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h9 (6.3.3-999) (custom) Affected: 6.2.0 , < 6.2.8-h10 (6.2.8-948) (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:::windows:::::* cpe:2.3:a:palo_alto_networks:globalprotect_app:::macos:::::* cpe:2.3:a:palo_alto_networks:globalprotect_app:::windows:::::* cpe:2.3:a:palo_alto_networks:globalprotect_app:::macos:::::*
Palo Alto Networks	GlobalProtect App	Affected: 6.1 , < 6.1.13 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:::android:::::* cpe:2.3:a:palo_alto_networks:globalprotect_app:::chrome_os:::::*
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h2 (6.3.3-42) (custom) Affected: 6.0.0 , < 6.0.11 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:::linux:::::* cpe:2.3:a:palo_alto_networks:globalprotect_app:::linux:::::*
Palo Alto Networks	GlobalProtect App	Affected: 6.0 , < 6.0.13 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:::windows:::::* cpe:2.3:a:palo_alto_networks:globalprotect_app:::macos:::::*
Palo Alto Networks	GlobalProtect App	Affected: 6.0 , < 6.0.14 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:::android:::::* cpe:2.3:a:palo_alto_networks:globalprotect_app:::chrome_os:::::*
Palo Alto Networks	GlobalProtect UWP App	Affected: 6.3 , < 6.3.3-h10 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_uwp_app:::windows:::::*
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom)

Date Public

2026-05-13 16:00

Credits

our internal security research teams

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0250",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-13T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-14T03:56:37.034Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "MacOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h9 (6.3.3-999)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h9 (6.3.3-999)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h10 (6.2.8-948)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h10 (6.2.8-948)",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.1.13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.1.13",
              "status": "affected",
              "version": "6.1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h2 (6.3.3-42)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h2 (6.3.3-42)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.11",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.11",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "MacOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.0.13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.13",
              "status": "affected",
              "version": "6.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.0.14",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.14",
              "status": "affected",
              "version": "6.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "GlobalProtect UWP App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h10",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h10",
              "status": "affected",
              "version": "6.3",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "iOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNo special configuration is required to be affected by this issue.\u003c/p\u003e"
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h9_6.3.3-999_",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h9_6.3.3-999_",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h10_6.2.8-948_",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h10_6.2.8-948_",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:android:*:*:*:*:*",
                  "versionEndExcluding": "6.1.13",
                  "versionStartIncluding": "6.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:chrome_os:*:*:*:*:*",
                  "versionEndExcluding": "6.1.13",
                  "versionStartIncluding": "6.1",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h2_6.3.3-42_",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.0.11",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.0.13",
                  "versionStartIncluding": "6.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.0.13",
                  "versionStartIncluding": "6.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:android:*:*:*:*:*",
                  "versionEndExcluding": "6.0.14",
                  "versionStartIncluding": "6.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:chrome_os:*:*:*:*:*",
                  "versionEndExcluding": "6.0.14",
                  "versionStartIncluding": "6.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_uwp_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h10",
                  "versionStartIncluding": "6.3",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:ios:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "other",
          "value": "our internal security research teams"
        }
      ],
      "datePublic": "2026-05-13T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect\u2122 app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway.\u003c/p\u003e\u003cp\u003eThe GlobalProtect app on iOS is not affected.\u003c/p\u003e"
            }
          ],
          "value": "A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect\u2122 app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway.\n\n\n\nThe GlobalProtect app on iOS is not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003ePalo Alto Networks is not aware of any malicious exploitation of this issue.\u003c/p\u003e"
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-540",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-540 Overread Buffers"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "ADJACENT",
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-13T18:26:51.927Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0250"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003c/th\u003e\u003cth\u003eMinor Version\u003c/th\u003e\u003cth\u003eSuggested Solution\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on Windows\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h8\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h9 (6.3.3-999) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on Windows\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h9\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h10 (6.2.8-948) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Windows\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Linux\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.10\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.11 or later.\u0026nbsp;\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2/6.3 on Linux\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.3.3-h1\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h2 (6.3.3-42) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on macOS\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h8\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h9 (6.3.3-999) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on macOS\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h9\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h10 (6.2.8-948) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on macOS\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on Android\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.1.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.1.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Android\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.13\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.14 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on ChromeOS\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.1.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.1.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on ChromeOS\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.13\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.14 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect UWP App\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.3.3-h9\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h10 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                              MINOR VERSION            SUGGESTED SOLUTION\nGlobalProtect App 6.3 on Windows     6.3.0 through 6.3.3-h8   Upgrade to 6.3.3-h9 (6.3.3-999) or later.\nGlobalProtect App 6.2 on Windows     6.2.0 through 6.2.8-h9   Upgrade to 6.2.8-h10 (6.2.8-948) or later.\nGlobalProtect App 6.0 on Windows     6.0.0 through 6.0.12     Upgrade to 6.0.13 or later.\nGlobalProtect App 6.0 on Linux       6.0.0 through 6.0.10     Upgrade to 6.0.11 or later. \nGlobalProtect App 6.2/6.3 on Linux   6.2.0 through 6.3.3-h1   Upgrade to 6.3.3-h2 (6.3.3-42) or later.\nGlobalProtect App 6.3 on macOS       6.3.0 through 6.3.3-h8   Upgrade to 6.3.3-h9 (6.3.3-999) or later.\nGlobalProtect App 6.2 on macOS       6.2.0 through 6.2.8-h9   Upgrade to 6.2.8-h10 (6.2.8-948) or later.\nGlobalProtect App 6.0 on macOS       6.0.0 through 6.0.12     Upgrade to 6.0.13 or later.\nGlobalProtect App 6.1 on Android     6.1.0 through 6.1.12     Upgrade to 6.1.13 or later.\nGlobalProtect App 6.0 on Android     6.0.0 through 6.0.13     Upgrade to 6.0.14 or later.\nGlobalProtect App 6.1 on ChromeOS    6.1.0 through 6.1.12     Upgrade to 6.1.13 or later.\nGlobalProtect App 6.0 on ChromeOS    6.0.0 through 6.0.13     Upgrade to 6.0.14 or later.\nGlobalProtect UWP App                6.1.0 through 6.3.3-h9   Upgrade to 6.3.3-h10 or later.\nGlobalProtect App on iOS                                      No action needed"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-05-13T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNo known workarounds exist for this issue.\u003c/p\u003e"
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0250",
    "datePublished": "2026-05-13T18:26:51.927Z",
    "dateReserved": "2025-11-03T20:44:11.022Z",
    "dateUpdated": "2026-05-14T03:56:37.034Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0251 (GCVE-0-2026-0251)

Vulnerability from cvelistv5 – Published: 2026-05-13 18:20 – Updated: 2026-05-14 03:56

Title

GlobalProtect App: Local Privilege Escalation Vulnerabilities

Summary

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.

Severity

5.9 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-13 00:00 UTC

CWE

CWE-426 - Untrusted Search Path

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0251	vendor-advisory

Impacted products

4 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h9 (6.3.3-999) (custom) Affected: 6.2.0 , < 6.2.8-h10 (6.2.8-948) (custom) Affected: 6.0.0 , < 6.0.13 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Windows::
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h9 (6.3.3-999) (custom) Affected: 6.2.0 , < 6.2.8-h10 (6.2.8-948) (custom) Affected: 6.0.0 , < 6.0.13 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::macOS::
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h2 (6.3.3-42) (custom) Affected: 6.0.0 , < 6.0.11 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Linux::
Palo Alto Networks	Global Protect App	Unaffected: All (custom)

Date Public

2026-05-13 16:00

Credits

Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0251",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-13T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-14T03:56:34.668Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h9 (6.3.3-999)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h9 (6.3.3-999)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h10 (6.2.8-948)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h10 (6.2.8-948)",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.13",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:macOS:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h9 (6.3.3-999)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h9 (6.3.3-999)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h10 (6.2.8-948)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h10 (6.2.8-948)",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.13",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Linux:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h2 (6.3.3-42)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h2 (6.3.3-42)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.11",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.11",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Android",
            "ChromeOS",
            "iOS",
            "UWP"
          ],
          "product": "Global Protect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNo special configuration is required to be affected by this issue.\u003c/p\u003e"
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Windows:*:*",
                  "versionEndExcluding": "6.3.3-h9_(6.3.3-999)",
                  "versionStartIncluding": "6.3.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Windows:*:*",
                  "versionEndExcluding": "6.2.8-h10_(6.2.8-948)",
                  "versionStartIncluding": "6.2.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Windows:*:*",
                  "versionEndExcluding": "6.0.13",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.3.3-h9_(6.3.3-999)",
                  "versionStartIncluding": "6.3.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.2.8-h10_(6.2.8-948)",
                  "versionStartIncluding": "6.2.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.0.13",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Linux:*:*",
                  "versionEndExcluding": "6.3.3-h2_(6.3.3-42)",
                  "versionStartIncluding": "6.3.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Linux:*:*",
                  "versionEndExcluding": "6.0.11",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "other",
          "value": "Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue."
        }
      ],
      "datePublic": "2026-05-13T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eMultiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect\u2122 app allow a local user to escalate their privileges to NT AUTHORITY\\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges.\u003cbr\u003e\u003cbr\u003eThe GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.\u003c/p\u003e"
            }
          ],
          "value": "Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect\u2122 app allow a local user to escalate their privileges to NT AUTHORITY\\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges.\n\nThe GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003ePalo Alto Networks is not aware of any malicious exploitation of these issues.\u003c/p\u003e"
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of these issues."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-233 Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-426",
              "description": "CWE-426 Untrusted Search Path",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-13T18:20:01.156Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0251"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003c/th\u003e\u003cth\u003eMinor Version\u003c/th\u003e\u003cth\u003eSuggested Solution\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Windows\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on Windows\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h9\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h10 (6.2.8-948) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on Windows\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h8\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h9 (6.3.3-999) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on macOS\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on macOS\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h9\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h10 (6.2.8-948) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on macOS\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h8\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h9 (6.3.3-999) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Linux\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.10\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.11 or later\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on Linux\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.9\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h2 (6.3.3-42) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on Linux\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h1\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h2 (6.3.3-42) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Chrome OS\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on UWP\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                            MINOR VERSION            SUGGESTED SOLUTION\nGlobalProtect App 6.0 on Windows   6.0.0 through 6.0.12     Upgrade to 6.0.13 or later.\nGlobalProtect App 6.2 on Windows   6.2.0 through 6.2.8-h9   Upgrade to 6.2.8-h10 (6.2.8-948) or later.\nGlobalProtect App 6.3 on Windows   6.3.0 through 6.3.3-h8   Upgrade to 6.3.3-h9 (6.3.3-999) or later.\nGlobalProtect App 6.0 on macOS     6.0.0 through 6.0.12     Upgrade to 6.0.13 or later.\nGlobalProtect App 6.2 on macOS     6.2.0 through 6.2.8-h9   Upgrade to 6.2.8-h10 (6.2.8-948) or later.\nGlobalProtect App 6.3 on macOS     6.3.0 through 6.3.3-h8   Upgrade to 6.3.3-h9 (6.3.3-999) or later.\nGlobalProtect App 6.0 on Linux     6.0.0 through 6.0.10     Upgrade to 6.0.11 or later\nGlobalProtect App 6.2 on Linux     6.2.0 through 6.2.9      Upgrade to 6.3.3-h2 (6.3.3-42) or later.\nGlobalProtect App 6.3 on Linux     6.3.0 through 6.3.3-h1   Upgrade to 6.3.3-h2 (6.3.3-42) or later.\nGlobalProtect App on Android                                No action needed.\nGlobalProtect App on Chrome OS                              No action needed.\nGlobalProtect App on iOS                                    No action needed.\nGlobalProtect App on UWP                                    No action needed."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-05-13T16:00:00.000Z",
          "value": "Initial publication."
        }
      ],
      "title": "GlobalProtect App: Local Privilege Escalation Vulnerabilities",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNo known workarounds exist for this issue.\u003c/p\u003e"
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.0.12",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0251",
    "datePublished": "2026-05-13T18:20:01.156Z",
    "dateReserved": "2025-11-03T20:44:11.930Z",
    "dateUpdated": "2026-05-14T03:56:34.668Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-2183 (GCVE-0-2025-2183)

Vulnerability from cvelistv5 – Published: 2025-08-13 17:05 – Updated: 2026-02-26 17:48

Title

GlobalProtect App: Improper Certificate Validation Leads to Privilege Escalation

Summary

An insufficient certificate validation issue in the Palo Alto Networks GlobalProtect™ app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root certificates on the endpoint and subsequently install malicious software signed by the malicious root certificates on that endpoint.

Severity

5.3 (Medium)


                        
                          CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:D/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-08-16 03:55 UTC

CWE

CWE-295 - Improper Certificate Validation

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2025-2183	vendor-advisory

Impacted products

4 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h2 (6.3.3-c676) (custom) Affected: 6.2.0 , < 6.2.8-h3 (6.2.8-c263) (custom) Affected: 6.1.0 (custom) Affected: 6.0.0 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.9:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Windows::
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3 (custom) Affected: 6.2.0 , < 11.1.10 (custom) Affected: 6.1.0 (custom) Affected: 6.0.0 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.9:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Linux::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom)
Palo Alto Networks	Global Protect UWP App	Unaffected: All (custom)

Date Public

2025-08-13 16:00

Credits

Nikola Markovic of Palo Alto Networks Maxime Escorbiac of Michelin CERT

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-2183",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-08-16T03:55:52.478514Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T17:48:39.832Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.9:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h2 (6.3.3-c676)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h2 (6.3.3-c676)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h3 (6.2.8-c263)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h3 (6.2.8-c263)",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.9:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Linux:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.1.10",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.1.10",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Android",
            "iOS",
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Global Protect UWP App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "GlobalProtect installations are impacted if either of the following conditions is true: \u003cb\u003e\u003cbr\u003e\u003c/b\u003e1.\u0026nbsp;The portal pushes certificates to the client, which are then used to validate the Portal or Gateway\u0027s certificate. These certificates are stored in the \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PNPRCA4\"\u003etca.cer\u003c/a\u003e file.  If the certificates listed in \"Trusted Root CA\" include the entire certificate chain for the Portal or Gateway certificate, the configuration will be vulnerable. \u003cb\u003e\u003cbr\u003e\u003cbr\u003e\u003c/b\u003e2. GlobalProtect app is deployed with the \u201cFULLCHAINCERTVERIFY\u201d option set to yes.\u0026nbsp;To learn more about this configuration, see the Solution section of this \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://security.paloaltonetworks.com/CVE-2024-5921\"\u003eadvisory\u003c/a\u003e."
            }
          ],
          "value": "GlobalProtect installations are impacted if either of the following conditions is true: \n1.\u00a0The portal pushes certificates to the client, which are then used to validate the Portal or Gateway\u0027s certificate. These certificates are stored in the  tca.cer https://knowledgebase.paloaltonetworks.com/KCSArticleDetail  file.  If the certificates listed in \"Trusted Root CA\" include the entire certificate chain for the Portal or Gateway certificate, the configuration will be vulnerable. \n\n2. GlobalProtect app is deployed with the \u201cFULLCHAINCERTVERIFY\u201d option set to yes.\u00a0To learn more about this configuration, see the Solution section of this  advisory https://security.paloaltonetworks.com/CVE-2024-5921 ."
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Nikola Markovic of Palo Alto Networks"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Maxime Escorbiac of Michelin CERT"
        }
      ],
      "datePublic": "2025-08-13T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An insufficient certificate validation issue in the Palo Alto Networks GlobalProtect\u2122 app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root certificates on the endpoint and subsequently install malicious software signed by the malicious root certificates on that endpoint."
            }
          ],
          "value": "An insufficient certificate validation issue in the Palo Alto Networks GlobalProtect\u2122 app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root certificates on the endpoint and subsequently install malicious software signed by the malicious root certificates on that endpoint."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-233 Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "PHYSICAL",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:D/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-295",
              "description": "CWE-295 Improper Certificate Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-13T17:05:08.612Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2025-2183"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.3.0 through 6.3.2\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.2-h9 or 6.3.3-h2 or later*.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.2 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through 6.2.8\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.2.8-h3 or later*.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on Windows\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h3 or 6.3.3-h2 or later*.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.0 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.2.8-h3 or 6.3.3-h2 or later*.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3 on Linux\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.3.0 through 6.3.2\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3 or later*.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on Linux\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3 or later*.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on Linux\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3 or later*.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Linux\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3 or later*.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android, iOS, macOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect UWP App\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003cbr\u003e* In addition to the software updates listed above, additional steps are required to protect against this vulnerability as described below:\u003cbr\u003e\u003cb\u003e\u003cbr\u003eSolution for new and existing GlobalProtect \u003c/b\u003e\u003cb\u003eapp installation on Windows / Linux\u003c/b\u003e\u003cbr\u003e\u003col\u003e\u003cli\u003eEnsure the portal/gateway certificate can be validated using the operating system\u0027s certificate store (e.g., Local Machine Certificate Store or Current User Certificate Store in Windows; for Linux, refer to this \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/6-2/globalprotect-app-user-guide/globalprotect-app-for-linux/support-for-native-certificate-store-for-prisma-access-and-globalprotect-app\"\u003edocumentation\u003c/a\u003e).\u003c/li\u003e\u003cli\u003eRemove any certificates associated with portal/gateway validation from the \"Trusted Root CA\" list on the Portal.\u0026nbsp;\u003c/li\u003e\u003cli\u003eEnable portal setting: \u201cEnable Strict Certificate Check\u201d (set FULLCHAINCERTVERIFY to yes).\u003cbr\u003e\u003c/li\u003e\u003c/ol\u003e"
            }
          ],
          "value": "Version\nMinor Version\nSuggested Solution\n\n                                    GlobalProtect App 6.3 on Windows\n\n                                    6.3.0 through 6.3.2\n                                    Upgrade to 6.3.2-h9 or 6.3.3-h2 or later*.\n                                \n                                    GlobalProtect App 6.2 on Windows\n\n                                    6.2.0 through 6.2.8\n                                    Upgrade to 6.2.8-h3 or later*.\n                                GlobalProtect App 6.1 on WindowsUpgrade to 6.2.8-h3 or 6.3.3-h2 or later*.\n                                    GlobalProtect App 6.0 on Windows\n\n                                    \n\n                                    Upgrade to 6.2.8-h3 or 6.3.3-h2 or later*.\n                                \n                                    GlobalProtect App 6.3 on Linux\n\n                                    6.3.0 through 6.3.2\n                                    Upgrade to 6.3.3 or later*.\n                                GlobalProtect App 6.2 on LinuxUpgrade to 6.3.3 or later*.GlobalProtect App 6.1 on LinuxUpgrade to 6.3.3 or later*.GlobalProtect App 6.0 on LinuxUpgrade to 6.3.3 or later*.GlobalProtect App on Android, iOS, macOS\nNo action needed.GlobalProtect UWP App\u00a0No action needed.\n* In addition to the software updates listed above, additional steps are required to protect against this vulnerability as described below:\n\nSolution for new and existing GlobalProtect app installation on Windows / Linux\n  *  Ensure the portal/gateway certificate can be validated using the operating system\u0027s certificate store (e.g., Local Machine Certificate Store or Current User Certificate Store in Windows; for Linux, refer to this  documentation https://docs.paloaltonetworks.com/globalprotect/6-2/globalprotect-app-user-guide/globalprotect-app-for-linux/support-for-native-certificate-store-for-prisma-access-and-globalprotect-app ).\n  *  Remove any certificates associated with portal/gateway validation from the \"Trusted Root CA\" list on the Portal.\u00a0\n  *  Enable portal setting: \u201cEnable Strict Certificate Check\u201d (set FULLCHAINCERTVERIFY to yes)."
        }
      ],
      "source": {
        "defect": [
          "GPC-22355"
        ],
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2025-08-13T16:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "GlobalProtect App: Improper Certificate Validation Leads to Privilege Escalation",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No known workarounds exist for this issue."
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.8-c243",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.1.9",
        "GlobalProtect App 6.1.7",
        "GlobalProtect App 6.1.6",
        "GlobalProtect App 6.1.5",
        "GlobalProtect App 6.1.4",
        "GlobalProtect App 6.1.3",
        "GlobalProtect App 6.1.2",
        "GlobalProtect App 6.1.1",
        "GlobalProtect App 6.1.0",
        "GlobalProtect App 6.1",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2025-2183",
    "datePublished": "2025-08-13T17:05:08.612Z",
    "dateReserved": "2025-03-10T17:56:25.934Z",
    "dateUpdated": "2026-02-26T17:48:39.832Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-2179 (GCVE-0-2025-2179)

Vulnerability from cvelistv5 – Published: 2025-07-29 17:15 – Updated: 2025-07-29 17:37

Title

GlobalProtect App: Non Admin User Can Disable the GlobalProtect App

Summary

An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on Linux devices enables a locally authenticated non administrative user to disable the app even if the GlobalProtect app configuration would not normally permit them to do so. The GlobalProtect app on Windows, macOS, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.

Severity

6.8 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-07-29 17:37 UTC

CWE

CWE-266 - Incorrect Privilege Assignment

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2025-2179	vendor-advisory

Impacted products

3 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.2.0 , < 6.2.9 (custom) Affected: 6.1.0 (custom) Affected: 6.0.0 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Linux::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom)
Palo Alto Networks	GlobalProtect UWP App	Unaffected: All (custom)

Date Public

2025-07-28 21:30

Credits

Alex Bourla Graham Brereton (graham.brereton@form3.tech)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-2179",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-29T17:37:10.712988Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-29T17:37:23.305Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Linux:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.2.9",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.9",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Android",
            "Chrome OS",
            "iOS",
            "Windows",
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "GlobalProtect UWP App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eYou are vulnerable to this issue if you have GlobalProtect configured with both of the following configurations:\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003col\u003e\u003cli\u003eConnect method set to \u0027Every time the user logs on to the machine (Always On)\u0027\u003c/li\u003e\u003cli\u003e\u0027Allow User to Disable GlobalProtect\u0027 set to either Disallow or \u0027Allow with Passcode\u0027\u003c/li\u003e\u003c/ol\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003eYou can verify if these configurations are enabled by either\u003c/p\u003e\u003col\u003e\u003cli\u003eNavigating to GlobalProtect \u0026gt; App Settings - GlobalProtect on the Strata Cloud Manager OR\u003c/li\u003e\u003cli\u003eNavigating to Network \u0026gt; GlobalProtect \u0026gt; Portals \u0026gt; Agent on Panorama or PAN-OS management web interface for directly-managed devices.\u003c/li\u003e\u003c/ol\u003e"
            }
          ],
          "value": "You are vulnerable to this issue if you have GlobalProtect configured with both of the following configurations:\n\n\n\n  *  Connect method set to \u0027Every time the user logs on to the machine (Always On)\u0027\n  *  \u0027Allow User to Disable GlobalProtect\u0027 set to either Disallow or \u0027Allow with Passcode\u0027\n\n\nYou can verify if these configurations are enabled by either\n\n  *  Navigating to GlobalProtect \u003e App Settings - GlobalProtect on the Strata Cloud Manager OR\n  *  Navigating to Network \u003e GlobalProtect \u003e Portals \u003e Agent on Panorama or PAN-OS management web interface for directly-managed devices."
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Alex Bourla"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Graham Brereton (graham.brereton@form3.tech)"
        }
      ],
      "datePublic": "2025-07-28T21:30:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect\u2122 App on Linux devices enables a locally authenticated non administrative user to disable the app even if the GlobalProtect app configuration would not normally permit them to do so.\u003cbr\u003e\u003cbr\u003eThe GlobalProtect app on Windows, macOS, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected."
            }
          ],
          "value": "An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect\u2122 App on Linux devices enables a locally authenticated non administrative user to disable the app even if the GlobalProtect app configuration would not normally permit them to do so.\n\nThe GlobalProtect app on Windows, macOS, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-578",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-578 Disable Security Software"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-266",
              "description": "CWE-266: Incorrect Privilege Assignment",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-29T17:15:08.461Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2025-2179"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.2 on Linux\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through 6.2.8\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.2.9 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on Linux\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.9 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Linux\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.9 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android, ChromeOS, iOS, macOS, Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "Version\nMinor Version\nSuggested Solution\n\n                                    GlobalProtect App 6.2 on Linux\n\n                                    6.2.0 through 6.2.8\n                                    Upgrade to 6.2.9 or later.\n                                GlobalProtect App 6.1 on LinuxUpgrade to 6.2.9 or later.GlobalProtect App 6.0 on LinuxUpgrade to 6.2.9 or later.GlobalProtect App on Android, ChromeOS, iOS, macOS, Windows\nNo action needed."
        }
      ],
      "source": {
        "defect": [
          "GPC-21751"
        ],
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2025-07-28T19:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "GlobalProtect App: Non Admin User Can Disable the GlobalProtect App",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No workaround or mitigation is available."
            }
          ],
          "value": "No workaround or mitigation is available."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.1.7",
        "GlobalProtect App 6.1.6",
        "GlobalProtect App 6.1.5",
        "GlobalProtect App 6.1.4",
        "GlobalProtect App 6.1.3",
        "GlobalProtect App 6.1.2",
        "GlobalProtect App 6.1.1",
        "GlobalProtect App 6.1.0",
        "GlobalProtect App 6.1",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2025-2179",
    "datePublished": "2025-07-29T17:15:08.461Z",
    "dateReserved": "2025-03-10T17:56:18.225Z",
    "dateUpdated": "2025-07-29T17:37:23.305Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CERTFR-2026-AVI-1014

Vulnerability from certfr_avis - Published: 2026-08-13 - Updated: 2026-08-13

De multiples vulnérabilités ont été découvertes dans les produits Palo Alto Networks. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Palo Alto Networks	PAN-OS	PAN-OS versions 11.1.x antérieures à 11.1.17
Palo Alto Networks	Cloud NGFW	Cloud NGFW sans les derniers correctifs de sécurité
Palo Alto Networks	GlobalProtect App	GlobalProtect App versions antérieures à 6.2.x antérieures à 6.2.8-h13 pour Windows et macOS
Palo Alto Networks	GlobalProtect App	GlobalProtect App versions antérieures à 6.0.x antérieures à 6.0.15
Palo Alto Networks	PAN-OS	PAN-OS versions antérieures à 10.2.8
Palo Alto Networks	Prisma Access	Prisma Access Agent versions antérieures à 26.3 pour Windows et macOS
Palo Alto Networks	GlobalProtect App	GlobalProtect App versions antérieures à 6.3.x antérieures à 6.3.3-h14 pour Windows et macOS
Palo Alto Networks	Prisma Access	Prisma Access versions antérieures à 10.2.10
Palo Alto Networks	Prisma Access	Prisma Access Agent versions antérieures à 26.2.2 pour Linux
Palo Alto Networks	GlobalProtect App	GlobalProtect App versions antérieures à 6.3.x antérieures à 6.3.3-h15 pour Linux
Palo Alto Networks	Prisma Access Browser	Prisma Browser versions antérieures à 150.49.8.187

References

Title

Publication Time

Tags

Bulletin de sécurité Palo Alto Networks CVE-2026-0298	2026-08-12	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0295	2026-08-12	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0301	2026-08-12	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0297	2026-08-12	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0293	2026-08-12	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0299	2026-08-12	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0292	2026-08-12	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0291	2026-08-12	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0294	2026-08-12	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0296	2026-08-12	vendor-advisory
Bulletin de sécurité Palo Alto Networks PAN-SA-2026-0011	2026-08-12	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "PAN-OS versions 11.1.x ant\u00e9rieures \u00e0 11.1.17",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Cloud NGFW sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "Cloud NGFW",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "GlobalProtect App versions ant\u00e9rieures \u00e0 6.2.x ant\u00e9rieures \u00e0 6.2.8-h13 pour Windows et macOS",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "GlobalProtect App versions ant\u00e9rieures \u00e0 6.0.x ant\u00e9rieures \u00e0 6.0.15 ",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions ant\u00e9rieures \u00e0 10.2.8",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Prisma Access Agent versions ant\u00e9rieures \u00e0 26.3 pour Windows et macOS",
      "product": {
        "name": "Prisma Access",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "GlobalProtect App versions ant\u00e9rieures \u00e0 6.3.x ant\u00e9rieures \u00e0 6.3.3-h14 pour Windows et macOS",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Prisma Access versions ant\u00e9rieures \u00e0 10.2.10",
      "product": {
        "name": "Prisma Access",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Prisma Access Agent versions ant\u00e9rieures \u00e0 26.2.2 pour Linux",
      "product": {
        "name": "Prisma Access",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "GlobalProtect App versions ant\u00e9rieures \u00e0 6.3.x ant\u00e9rieures \u00e0 6.3.3-h15 pour Linux",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Prisma Browser versions ant\u00e9rieures \u00e0 150.49.8.187",
      "product": {
        "name": "Prisma Access Browser",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-13848",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13848"
    },
    {
      "name": "CVE-2026-14098",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14098"
    },
    {
      "name": "CVE-2026-13791",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13791"
    },
    {
      "name": "CVE-2026-14104",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14104"
    },
    {
      "name": "CVE-2026-13934",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13934"
    },
    {
      "name": "CVE-2026-14080",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14080"
    },
    {
      "name": "CVE-2026-15118",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15118"
    },
    {
      "name": "CVE-2026-13806",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13806"
    },
    {
      "name": "CVE-2026-14100",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14100"
    },
    {
      "name": "CVE-2026-13933",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13933"
    },
    {
      "name": "CVE-2026-14002",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14002"
    },
    {
      "name": "CVE-2026-13774",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13774"
    },
    {
      "name": "CVE-2026-13893",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13893"
    },
    {
      "name": "CVE-2026-13834",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13834"
    },
    {
      "name": "CVE-2026-13974",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13974"
    },
    {
      "name": "CVE-2026-16807",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16807"
    },
    {
      "name": "CVE-2026-14143",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14143"
    },
    {
      "name": "CVE-2026-14077",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14077"
    },
    {
      "name": "CVE-2026-14083",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14083"
    },
    {
      "name": "CVE-2026-13888",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13888"
    },
    {
      "name": "CVE-2026-13838",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13838"
    },
    {
      "name": "CVE-2026-13914",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13914"
    },
    {
      "name": "CVE-2026-0299",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0299"
    },
    {
      "name": "CVE-2026-14101",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14101"
    },
    {
      "name": "CVE-2026-13822",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13822"
    },
    {
      "name": "CVE-2026-13949",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13949"
    },
    {
      "name": "CVE-2026-14134",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14134"
    },
    {
      "name": "CVE-2026-14055",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14055"
    },
    {
      "name": "CVE-2026-14131",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14131"
    },
    {
      "name": "CVE-2026-13930",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13930"
    },
    {
      "name": "CVE-2026-13840",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13840"
    },
    {
      "name": "CVE-2026-15903",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15903"
    },
    {
      "name": "CVE-2026-15768",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15768"
    },
    {
      "name": "CVE-2026-13904",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13904"
    },
    {
      "name": "CVE-2026-14093",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14093"
    },
    {
      "name": "CVE-2026-14072",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14072"
    },
    {
      "name": "CVE-2026-13906",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13906"
    },
    {
      "name": "CVE-2026-14061",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14061"
    },
    {
      "name": "CVE-2026-14106",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14106"
    },
    {
      "name": "CVE-2026-15776",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15776"
    },
    {
      "name": "CVE-2026-13839",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13839"
    },
    {
      "name": "CVE-2026-0301",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0301"
    },
    {
      "name": "CVE-2026-13830",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13830"
    },
    {
      "name": "CVE-2026-14000",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14000"
    },
    {
      "name": "CVE-2026-14156",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14156"
    },
    {
      "name": "CVE-2026-14147",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14147"
    },
    {
      "name": "CVE-2026-14063",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14063"
    },
    {
      "name": "CVE-2026-14152",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14152"
    },
    {
      "name": "CVE-2026-13946",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13946"
    },
    {
      "name": "CVE-2026-14030",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14030"
    },
    {
      "name": "CVE-2026-14141",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14141"
    },
    {
      "name": "CVE-2026-13853",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13853"
    },
    {
      "name": "CVE-2026-13980",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13980"
    },
    {
      "name": "CVE-2026-0295",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0295"
    },
    {
      "name": "CVE-2026-15125",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15125"
    },
    {
      "name": "CVE-2026-13970",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13970"
    },
    {
      "name": "CVE-2026-13857",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13857"
    },
    {
      "name": "CVE-2026-15130",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15130"
    },
    {
      "name": "CVE-2026-14010",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14010"
    },
    {
      "name": "CVE-2026-13962",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13962"
    },
    {
      "name": "CVE-2026-13977",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13977"
    },
    {
      "name": "CVE-2026-15120",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15120"
    },
    {
      "name": "CVE-2026-14070",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14070"
    },
    {
      "name": "CVE-2026-13804",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13804"
    },
    {
      "name": "CVE-2026-0290",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0290"
    },
    {
      "name": "CVE-2026-13984",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13984"
    },
    {
      "name": "CVE-2026-14040",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14040"
    },
    {
      "name": "CVE-2026-13873",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13873"
    },
    {
      "name": "CVE-2026-13858",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13858"
    },
    {
      "name": "CVE-2026-13950",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13950"
    },
    {
      "name": "CVE-2026-14137",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14137"
    },
    {
      "name": "CVE-2026-13846",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13846"
    },
    {
      "name": "CVE-2026-14107",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14107"
    },
    {
      "name": "CVE-2026-14049",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14049"
    },
    {
      "name": "CVE-2026-13981",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13981"
    },
    {
      "name": "CVE-2026-14089",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14089"
    },
    {
      "name": "CVE-2026-13831",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13831"
    },
    {
      "name": "CVE-2026-13938",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13938"
    },
    {
      "name": "CVE-2026-13875",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13875"
    },
    {
      "name": "CVE-2026-13787",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13787"
    },
    {
      "name": "CVE-2026-13786",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13786"
    },
    {
      "name": "CVE-2026-15112",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15112"
    },
    {
      "name": "CVE-2026-13862",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13862"
    },
    {
      "name": "CVE-2026-14014",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14014"
    },
    {
      "name": "CVE-2026-13781",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13781"
    },
    {
      "name": "CVE-2026-16423",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16423"
    },
    {
      "name": "CVE-2026-13898",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13898"
    },
    {
      "name": "CVE-2026-14001",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14001"
    },
    {
      "name": "CVE-2026-13957",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13957"
    },
    {
      "name": "CVE-2026-13925",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13925"
    },
    {
      "name": "CVE-2026-15765",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15765"
    },
    {
      "name": "CVE-2026-14067",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14067"
    },
    {
      "name": "CVE-2026-14096",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14096"
    },
    {
      "name": "CVE-2026-14142",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14142"
    },
    {
      "name": "CVE-2026-13802",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13802"
    },
    {
      "name": "CVE-2026-14008",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14008"
    },
    {
      "name": "CVE-2026-13953",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13953"
    },
    {
      "name": "CVE-2026-16418",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16418"
    },
    {
      "name": "CVE-2026-13964",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13964"
    },
    {
      "name": "CVE-2026-15115",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15115"
    },
    {
      "name": "CVE-2026-13874",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13874"
    },
    {
      "name": "CVE-2026-15121",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15121"
    },
    {
      "name": "CVE-2026-15124",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15124"
    },
    {
      "name": "CVE-2026-14042",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14042"
    },
    {
      "name": "CVE-2026-13809",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13809"
    },
    {
      "name": "CVE-2026-14045",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14045"
    },
    {
      "name": "CVE-2026-14009",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14009"
    },
    {
      "name": "CVE-2026-13947",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13947"
    },
    {
      "name": "CVE-2026-15109",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15109"
    },
    {
      "name": "CVE-2026-14145",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14145"
    },
    {
      "name": "CVE-2026-14111",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14111"
    },
    {
      "name": "CVE-2026-14053",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14053"
    },
    {
      "name": "CVE-2026-14082",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14082"
    },
    {
      "name": "CVE-2026-13879",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13879"
    },
    {
      "name": "CVE-2026-14091",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14091"
    },
    {
      "name": "CVE-2026-14088",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14088"
    },
    {
      "name": "CVE-2026-0289",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0289"
    },
    {
      "name": "CVE-2026-14112",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14112"
    },
    {
      "name": "CVE-2026-13777",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13777"
    },
    {
      "name": "CVE-2026-15110",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15110"
    },
    {
      "name": "CVE-2026-14095",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14095"
    },
    {
      "name": "CVE-2026-14085",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14085"
    },
    {
      "name": "CVE-2026-14035",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14035"
    },
    {
      "name": "CVE-2026-13932",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13932"
    },
    {
      "name": "CVE-2026-14103",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14103"
    },
    {
      "name": "CVE-2026-14073",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14073"
    },
    {
      "name": "CVE-2026-13997",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13997"
    },
    {
      "name": "CVE-2026-14114",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14114"
    },
    {
      "name": "CVE-2026-13989",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13989"
    },
    {
      "name": "CVE-2026-14132",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14132"
    },
    {
      "name": "CVE-2026-13965",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13965"
    },
    {
      "name": "CVE-2026-14062",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14062"
    },
    {
      "name": "CVE-2026-13998",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13998"
    },
    {
      "name": "CVE-2026-13795",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13795"
    },
    {
      "name": "CVE-2026-13908",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13908"
    },
    {
      "name": "CVE-2026-13881",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13881"
    },
    {
      "name": "CVE-2026-14110",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14110"
    },
    {
      "name": "CVE-2026-15128",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15128"
    },
    {
      "name": "CVE-2026-14064",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14064"
    },
    {
      "name": "CVE-2026-13945",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13945"
    },
    {
      "name": "CVE-2026-15771",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15771"
    },
    {
      "name": "CVE-2026-15775",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15775"
    },
    {
      "name": "CVE-2026-13817",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13817"
    },
    {
      "name": "CVE-2026-13870",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13870"
    },
    {
      "name": "CVE-2026-0296",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0296"
    },
    {
      "name": "CVE-2026-15905",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15905"
    },
    {
      "name": "CVE-2026-13958",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13958"
    },
    {
      "name": "CVE-2026-16413",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16413"
    },
    {
      "name": "CVE-2026-13915",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13915"
    },
    {
      "name": "CVE-2026-13916",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13916"
    },
    {
      "name": "CVE-2026-13969",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13969"
    },
    {
      "name": "CVE-2026-14121",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14121"
    },
    {
      "name": "CVE-2026-15764",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15764"
    },
    {
      "name": "CVE-2026-13797",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13797"
    },
    {
      "name": "CVE-2026-13912",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13912"
    },
    {
      "name": "CVE-2026-15117",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15117"
    },
    {
      "name": "CVE-2026-14076",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14076"
    },
    {
      "name": "CVE-2026-13982",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13982"
    },
    {
      "name": "CVE-2026-14050",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14050"
    },
    {
      "name": "CVE-2026-15129",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15129"
    },
    {
      "name": "CVE-2026-14094",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14094"
    },
    {
      "name": "CVE-2026-13884",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13884"
    },
    {
      "name": "CVE-2026-15116",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15116"
    },
    {
      "name": "CVE-2026-13820",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13820"
    },
    {
      "name": "CVE-2026-13775",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13775"
    },
    {
      "name": "CVE-2026-13856",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13856"
    },
    {
      "name": "CVE-2026-13923",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13923"
    },
    {
      "name": "CVE-2026-14058",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14058"
    },
    {
      "name": "CVE-2026-14047",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14047"
    },
    {
      "name": "CVE-2026-14097",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14097"
    },
    {
      "name": "CVE-2026-16804",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16804"
    },
    {
      "name": "CVE-2026-14105",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14105"
    },
    {
      "name": "CVE-2026-13784",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13784"
    },
    {
      "name": "CVE-2026-16806",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16806"
    },
    {
      "name": "CVE-2026-14119",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14119"
    },
    {
      "name": "CVE-2026-14060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14060"
    },
    {
      "name": "CVE-2026-13779",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13779"
    },
    {
      "name": "CVE-2026-13929",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13929"
    },
    {
      "name": "CVE-2026-14021",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14021"
    },
    {
      "name": "CVE-2026-14140",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14140"
    },
    {
      "name": "CVE-2026-13901",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13901"
    },
    {
      "name": "CVE-2026-14013",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14013"
    },
    {
      "name": "CVE-2026-13943",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13943"
    },
    {
      "name": "CVE-2026-13939",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13939"
    },
    {
      "name": "CVE-2026-14081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14081"
    },
    {
      "name": "CVE-2026-13882",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13882"
    },
    {
      "name": "CVE-2026-13917",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13917"
    },
    {
      "name": "CVE-2026-14075",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14075"
    },
    {
      "name": "CVE-2026-14086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14086"
    },
    {
      "name": "CVE-2026-14038",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14038"
    },
    {
      "name": "CVE-2026-13973",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13973"
    },
    {
      "name": "CVE-2026-14044",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14044"
    },
    {
      "name": "CVE-2026-13843",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13843"
    },
    {
      "name": "CVE-2026-14046",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14046"
    },
    {
      "name": "CVE-2026-14018",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14018"
    },
    {
      "name": "CVE-2026-16420",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16420"
    },
    {
      "name": "CVE-2026-14099",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14099"
    },
    {
      "name": "CVE-2026-13827",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13827"
    },
    {
      "name": "CVE-2026-13892",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13892"
    },
    {
      "name": "CVE-2026-13815",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13815"
    },
    {
      "name": "CVE-2026-13868",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13868"
    },
    {
      "name": "CVE-2026-13891",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13891"
    },
    {
      "name": "CVE-2026-13972",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13972"
    },
    {
      "name": "CVE-2026-14011",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14011"
    },
    {
      "name": "CVE-2026-14150",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14150"
    },
    {
      "name": "CVE-2026-15131",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15131"
    },
    {
      "name": "CVE-2026-13826",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13826"
    },
    {
      "name": "CVE-2026-13960",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13960"
    },
    {
      "name": "CVE-2026-13956",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13956"
    },
    {
      "name": "CVE-2026-13778",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13778"
    },
    {
      "name": "CVE-2026-13978",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13978"
    },
    {
      "name": "CVE-2026-14041",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14041"
    },
    {
      "name": "CVE-2026-14017",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14017"
    },
    {
      "name": "CVE-2026-14031",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14031"
    },
    {
      "name": "CVE-2026-15108",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15108"
    },
    {
      "name": "CVE-2026-14135",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14135"
    },
    {
      "name": "CVE-2026-14052",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14052"
    },
    {
      "name": "CVE-2026-14133",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14133"
    },
    {
      "name": "CVE-2026-13863",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13863"
    },
    {
      "name": "CVE-2026-14113",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14113"
    },
    {
      "name": "CVE-2026-13871",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13871"
    },
    {
      "name": "CVE-2026-14108",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14108"
    },
    {
      "name": "CVE-2026-13936",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13936"
    },
    {
      "name": "CVE-2026-14039",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14039"
    },
    {
      "name": "CVE-2026-13832",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13832"
    },
    {
      "name": "CVE-2026-14026",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14026"
    },
    {
      "name": "CVE-2026-16805",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16805"
    },
    {
      "name": "CVE-2026-13931",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13931"
    },
    {
      "name": "CVE-2026-13911",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13911"
    },
    {
      "name": "CVE-2026-13992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13992"
    },
    {
      "name": "CVE-2026-14149",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14149"
    },
    {
      "name": "CVE-2026-13988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13988"
    },
    {
      "name": "CVE-2026-13940",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13940"
    },
    {
      "name": "CVE-2026-13821",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13821"
    },
    {
      "name": "CVE-2026-13999",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13999"
    },
    {
      "name": "CVE-2026-13883",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13883"
    },
    {
      "name": "CVE-2026-14025",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14025"
    },
    {
      "name": "CVE-2026-13808",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13808"
    },
    {
      "name": "CVE-2026-13837",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13837"
    },
    {
      "name": "CVE-2026-0293",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0293"
    },
    {
      "name": "CVE-2026-14023",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14023"
    },
    {
      "name": "CVE-2026-14028",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14028"
    },
    {
      "name": "CVE-2026-14003",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14003"
    },
    {
      "name": "CVE-2026-14124",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14124"
    },
    {
      "name": "CVE-2026-13899",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13899"
    },
    {
      "name": "CVE-2026-15769",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15769"
    },
    {
      "name": "CVE-2026-15123",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15123"
    },
    {
      "name": "CVE-2026-14051",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14051"
    },
    {
      "name": "CVE-2026-13896",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13896"
    },
    {
      "name": "CVE-2026-13800",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13800"
    },
    {
      "name": "CVE-2026-13937",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13937"
    },
    {
      "name": "CVE-2026-13776",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13776"
    },
    {
      "name": "CVE-2026-14016",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14016"
    },
    {
      "name": "CVE-2026-13922",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13922"
    },
    {
      "name": "CVE-2026-14024",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14024"
    },
    {
      "name": "CVE-2026-13990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13990"
    },
    {
      "name": "CVE-2026-15122",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15122"
    },
    {
      "name": "CVE-2026-13971",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13971"
    },
    {
      "name": "CVE-2026-13844",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13844"
    },
    {
      "name": "CVE-2026-13823",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13823"
    },
    {
      "name": "CVE-2026-14151",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14151"
    },
    {
      "name": "CVE-2026-15133",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15133"
    },
    {
      "name": "CVE-2026-13909",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13909"
    },
    {
      "name": "CVE-2026-14034",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14034"
    },
    {
      "name": "CVE-2026-13963",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13963"
    },
    {
      "name": "CVE-2026-13876",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13876"
    },
    {
      "name": "CVE-2026-13829",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13829"
    },
    {
      "name": "CVE-2026-13979",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13979"
    },
    {
      "name": "CVE-2026-15113",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15113"
    },
    {
      "name": "CVE-2026-15773",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15773"
    },
    {
      "name": "CVE-2026-14092",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14092"
    },
    {
      "name": "CVE-2026-13885",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13885"
    },
    {
      "name": "CVE-2026-14071",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14071"
    },
    {
      "name": "CVE-2026-13919",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13919"
    },
    {
      "name": "CVE-2026-14005",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14005"
    },
    {
      "name": "CVE-2026-13847",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13847"
    },
    {
      "name": "CVE-2026-14022",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14022"
    },
    {
      "name": "CVE-2026-13836",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13836"
    },
    {
      "name": "CVE-2026-14129",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14129"
    },
    {
      "name": "CVE-2026-14144",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14144"
    },
    {
      "name": "CVE-2026-13849",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13849"
    },
    {
      "name": "CVE-2026-0291",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0291"
    },
    {
      "name": "CVE-2026-15901",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15901"
    },
    {
      "name": "CVE-2026-15900",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15900"
    },
    {
      "name": "CVE-2026-14125",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14125"
    },
    {
      "name": "CVE-2026-13952",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13952"
    },
    {
      "name": "CVE-2026-14015",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14015"
    },
    {
      "name": "CVE-2026-14069",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14069"
    },
    {
      "name": "CVE-2026-13986",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13986"
    },
    {
      "name": "CVE-2026-14066",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14066"
    },
    {
      "name": "CVE-2026-13961",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13961"
    },
    {
      "name": "CVE-2026-13941",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13941"
    },
    {
      "name": "CVE-2026-15772",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15772"
    },
    {
      "name": "CVE-2026-16422",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16422"
    },
    {
      "name": "CVE-2026-16416",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16416"
    },
    {
      "name": "CVE-2026-13894",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13894"
    },
    {
      "name": "CVE-2026-13910",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13910"
    },
    {
      "name": "CVE-2026-13880",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13880"
    },
    {
      "name": "CVE-2026-13825",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13825"
    },
    {
      "name": "CVE-2026-14117",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14117"
    },
    {
      "name": "CVE-2026-13859",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13859"
    },
    {
      "name": "CVE-2026-16424",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16424"
    },
    {
      "name": "CVE-2026-13955",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13955"
    },
    {
      "name": "CVE-2026-13954",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13954"
    },
    {
      "name": "CVE-2026-13869",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13869"
    },
    {
      "name": "CVE-2026-13852",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13852"
    },
    {
      "name": "CVE-2026-13926",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13926"
    },
    {
      "name": "CVE-2026-13877",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13877"
    },
    {
      "name": "CVE-2026-13790",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13790"
    },
    {
      "name": "CVE-2026-13783",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13783"
    },
    {
      "name": "CVE-2026-13867",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13867"
    },
    {
      "name": "CVE-2026-15767",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15767"
    },
    {
      "name": "CVE-2026-15114",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15114"
    },
    {
      "name": "CVE-2026-13799",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13799"
    },
    {
      "name": "CVE-2026-13794",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13794"
    },
    {
      "name": "CVE-2026-14027",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14027"
    },
    {
      "name": "CVE-2026-13897",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13897"
    },
    {
      "name": "CVE-2026-13860",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13860"
    },
    {
      "name": "CVE-2026-15127",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15127"
    },
    {
      "name": "CVE-2026-13788",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13788"
    },
    {
      "name": "CVE-2026-14123",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14123"
    },
    {
      "name": "CVE-2026-14048",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14048"
    },
    {
      "name": "CVE-2026-14139",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14139"
    },
    {
      "name": "CVE-2026-14138",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14138"
    },
    {
      "name": "CVE-2026-15766",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15766"
    },
    {
      "name": "CVE-2026-14079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14079"
    },
    {
      "name": "CVE-2026-13967",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13967"
    },
    {
      "name": "CVE-2026-13920",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13920"
    },
    {
      "name": "CVE-2026-14148",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14148"
    },
    {
      "name": "CVE-2026-14102",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14102"
    },
    {
      "name": "CVE-2026-13944",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13944"
    },
    {
      "name": "CVE-2026-13785",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13785"
    },
    {
      "name": "CVE-2026-14122",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14122"
    },
    {
      "name": "CVE-2026-14130",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14130"
    },
    {
      "name": "CVE-2026-13983",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13983"
    },
    {
      "name": "CVE-2026-13805",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13805"
    },
    {
      "name": "CVE-2026-15107",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15107"
    },
    {
      "name": "CVE-2026-13996",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13996"
    },
    {
      "name": "CVE-2026-14036",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14036"
    },
    {
      "name": "CVE-2026-14074",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14074"
    },
    {
      "name": "CVE-2026-14146",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14146"
    },
    {
      "name": "CVE-2026-16421",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16421"
    },
    {
      "name": "CVE-2026-13841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13841"
    },
    {
      "name": "CVE-2026-13793",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13793"
    },
    {
      "name": "CVE-2026-14127",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14127"
    },
    {
      "name": "CVE-2026-14078",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14078"
    },
    {
      "name": "CVE-2026-13968",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13968"
    },
    {
      "name": "CVE-2026-15777",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15777"
    },
    {
      "name": "CVE-2026-13921",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13921"
    },
    {
      "name": "CVE-2026-14126",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14126"
    },
    {
      "name": "CVE-2026-13828",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13828"
    },
    {
      "name": "CVE-2026-0292",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0292"
    },
    {
      "name": "CVE-2026-14090",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14090"
    },
    {
      "name": "CVE-2026-13864",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13864"
    },
    {
      "name": "CVE-2026-14004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14004"
    },
    {
      "name": "CVE-2026-14065",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14065"
    },
    {
      "name": "CVE-2026-13924",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13924"
    },
    {
      "name": "CVE-2026-13835",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13835"
    },
    {
      "name": "CVE-2026-13951",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13951"
    },
    {
      "name": "CVE-2026-13928",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13928"
    },
    {
      "name": "CVE-2026-13966",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13966"
    },
    {
      "name": "CVE-2026-13850",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13850"
    },
    {
      "name": "CVE-2026-13866",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13866"
    },
    {
      "name": "CVE-2026-15770",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15770"
    },
    {
      "name": "CVE-2026-13886",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13886"
    },
    {
      "name": "CVE-2026-13851",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13851"
    },
    {
      "name": "CVE-2026-14020",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14020"
    },
    {
      "name": "CVE-2026-14136",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14136"
    },
    {
      "name": "CVE-2026-14056",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14056"
    },
    {
      "name": "CVE-2026-16419",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16419"
    },
    {
      "name": "CVE-2026-14032",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14032"
    },
    {
      "name": "CVE-2026-14116",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14116"
    },
    {
      "name": "CVE-2026-13942",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13942"
    },
    {
      "name": "CVE-2026-15774",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15774"
    },
    {
      "name": "CVE-2026-13816",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13816"
    },
    {
      "name": "CVE-2026-14068",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14068"
    },
    {
      "name": "CVE-2026-14109",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14109"
    },
    {
      "name": "CVE-2026-14128",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14128"
    },
    {
      "name": "CVE-2026-13833",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13833"
    },
    {
      "name": "CVE-2026-13798",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13798"
    },
    {
      "name": "CVE-2026-13855",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13855"
    },
    {
      "name": "CVE-2026-13985",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13985"
    },
    {
      "name": "CVE-2026-15126",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15126"
    },
    {
      "name": "CVE-2026-14115",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14115"
    },
    {
      "name": "CVE-2026-13861",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13861"
    },
    {
      "name": "CVE-2026-13991",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13991"
    },
    {
      "name": "CVE-2026-14054",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14054"
    },
    {
      "name": "CVE-2026-14033",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14033"
    },
    {
      "name": "CVE-2026-16415",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16415"
    },
    {
      "name": "CVE-2026-14037",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14037"
    },
    {
      "name": "CVE-2026-13907",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13907"
    },
    {
      "name": "CVE-2026-14120",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14120"
    },
    {
      "name": "CVE-2026-13792",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13792"
    },
    {
      "name": "CVE-2026-14084",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14084"
    },
    {
      "name": "CVE-2026-13994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13994"
    },
    {
      "name": "CVE-2026-14007",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14007"
    },
    {
      "name": "CVE-2026-13818",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13818"
    },
    {
      "name": "CVE-2026-13895",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13895"
    },
    {
      "name": "CVE-2026-14019",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14019"
    },
    {
      "name": "CVE-2026-14012",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14012"
    },
    {
      "name": "CVE-2026-13811",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13811"
    },
    {
      "name": "CVE-2026-14153",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14153"
    },
    {
      "name": "CVE-2026-15904",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15904"
    },
    {
      "name": "CVE-2026-13887",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13887"
    },
    {
      "name": "CVE-2026-13819",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13819"
    },
    {
      "name": "CVE-2026-0297",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0297"
    },
    {
      "name": "CVE-2026-13976",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13976"
    },
    {
      "name": "CVE-2026-13900",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13900"
    },
    {
      "name": "CVE-2026-15899",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15899"
    },
    {
      "name": "CVE-2026-14154",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14154"
    },
    {
      "name": "CVE-2026-14006",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14006"
    },
    {
      "name": "CVE-2026-13903",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13903"
    },
    {
      "name": "CVE-2026-13789",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13789"
    },
    {
      "name": "CVE-2026-14057",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14057"
    },
    {
      "name": "CVE-2026-13872",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13872"
    },
    {
      "name": "CVE-2026-0298",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0298"
    },
    {
      "name": "CVE-2026-13780",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13780"
    },
    {
      "name": "CVE-2026-15902",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15902"
    },
    {
      "name": "CVE-2026-15778",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15778"
    },
    {
      "name": "CVE-2026-13801",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13801"
    },
    {
      "name": "CVE-2026-13935",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13935"
    },
    {
      "name": "CVE-2026-13995",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13995"
    },
    {
      "name": "CVE-2026-13878",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13878"
    },
    {
      "name": "CVE-2026-0294",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0294"
    },
    {
      "name": "CVE-2026-13987",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13987"
    },
    {
      "name": "CVE-2026-14043",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14043"
    },
    {
      "name": "CVE-2026-13824",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13824"
    },
    {
      "name": "CVE-2026-13927",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13927"
    },
    {
      "name": "CVE-2026-13905",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13905"
    },
    {
      "name": "CVE-2026-15119",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15119"
    },
    {
      "name": "CVE-2026-16414",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16414"
    },
    {
      "name": "CVE-2026-14087",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14087"
    },
    {
      "name": "CVE-2026-13845",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13845"
    },
    {
      "name": "CVE-2026-14155",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14155"
    },
    {
      "name": "CVE-2026-13889",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13889"
    },
    {
      "name": "CVE-2026-13913",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13913"
    },
    {
      "name": "CVE-2026-13959",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13959"
    },
    {
      "name": "CVE-2026-13814",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13814"
    },
    {
      "name": "CVE-2026-13948",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13948"
    },
    {
      "name": "CVE-2026-13902",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13902"
    },
    {
      "name": "CVE-2026-13975",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13975"
    },
    {
      "name": "CVE-2026-15111",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15111"
    },
    {
      "name": "CVE-2026-13782",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13782"
    },
    {
      "name": "CVE-2026-13993",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13993"
    },
    {
      "name": "CVE-2026-14118",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14118"
    },
    {
      "name": "CVE-2026-13842",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13842"
    },
    {
      "name": "CVE-2026-13854",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13854"
    },
    {
      "name": "CVE-2026-13803",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13803"
    },
    {
      "name": "CVE-2026-13865",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13865"
    },
    {
      "name": "CVE-2026-13807",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13807"
    },
    {
      "name": "CVE-2026-15132",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15132"
    },
    {
      "name": "CVE-2026-14059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14059"
    },
    {
      "name": "CVE-2026-13918",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13918"
    },
    {
      "name": "CVE-2026-13890",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13890"
    },
    {
      "name": "CVE-2026-16417",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16417"
    },
    {
      "name": "CVE-2026-13810",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13810"
    },
    {
      "name": "CVE-2026-13796",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13796"
    },
    {
      "name": "CVE-2026-13813",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13813"
    },
    {
      "name": "CVE-2026-13812",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13812"
    }
  ],
  "initial_release_date": "2026-08-13T00:00:00",
  "last_revision_date": "2026-08-13T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-1014",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-08-13T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Palo Alto Networks. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Palo Alto Networks",
  "vendor_advisories": [
    {
      "published_at": "2026-08-12",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0298",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0298"
    },
    {
      "published_at": "2026-08-12",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0295",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0295"
    },
    {
      "published_at": "2026-08-12",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0301",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0301"
    },
    {
      "published_at": "2026-08-12",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0297",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0297"
    },
    {
      "published_at": "2026-08-12",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0293",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0293"
    },
    {
      "published_at": "2026-08-12",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0299",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0299"
    },
    {
      "published_at": "2026-08-12",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0292",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0292"
    },
    {
      "published_at": "2026-08-12",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0291",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0291"
    },
    {
      "published_at": "2026-08-12",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0294",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0294"
    },
    {
      "published_at": "2026-08-12",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0296",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0296"
    },
    {
      "published_at": "2026-08-12",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks PAN-SA-2026-0011",
      "url": "https://security.paloaltonetworks.com/PAN-SA-2026-0011"
    }
  ]
}

CERTFR-2026-AVI-0734

Vulnerability from certfr_avis - Published: 2026-06-11 - Updated: 2026-06-11

De multiples vulnérabilités ont été découvertes dans les produits Palo Alto Networks. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Palo Alto Networks	Prisma Access Browser	Prisma Access Agent versions antérieures à 26.2.1 sur Linux
Palo Alto Networks	PAN-OS	PAN-OS versions 11.2.x antérieures à 11.2.11
Palo Alto Networks	Prisma Access Browser	Prisma Browser versions antérieures à 148.18.4.217
Palo Alto Networks	PAN-OS	PAN-OS versions 10.2.0 antérieures à 10.2.7-h35
Palo Alto Networks	PAN-OS	PAN-OS versions 10.2.x à 11.1.x antérieures à 11.1.14
Palo Alto Networks	GlobalProtect App	GlobalProtect App versions 6.2.x antérieures à 6.2.8-h2
Palo Alto Networks	Cortex XSOAR	Cortex XSOAR CommvaultSecurityIQ Marketplace versions antérieures à 1.2.0
Palo Alto Networks	Cortex XSOAR	Cortex XSOAR versions antérieures à 8.13.0.11 sur Linux
Palo Alto Networks	PAN-OS	PAN-OS versions 12.1.x antérieures à 12.1.5
Palo Alto Networks	GlobalProtect App	GlobalProtect App versions 6.3.x antérieures à 6.3.3-h1
Palo Alto Networks	Cortex XSIAM	Cortex XSIAM CommvaultSecurityIQ Marketplace versions antérieures à 1.2.0

References

Title

Publication Time

Tags

Bulletin de sécurité Palo Alto Networks CVE-2026-0273	2026-06-10	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0269	2026-06-10	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0266	2026-06-10	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0268	2026-06-10	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0270	2026-06-10	vendor-advisory
Bulletin de sécurité Palo Alto Networks PAN-SA-2026-0008	2026-06-10	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0272	2026-06-10	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0271	2026-06-10	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0274	2026-06-10	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0267	2026-06-10	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Prisma Access Agent versions ant\u00e9rieures \u00e0 26.2.1 sur Linux",
      "product": {
        "name": "Prisma Access Browser",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.2.x ant\u00e9rieures \u00e0 11.2.11",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Prisma Browser versions ant\u00e9rieures \u00e0 148.18.4.217",
      "product": {
        "name": "Prisma Access Browser",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 10.2.0 ant\u00e9rieures \u00e0 10.2.7-h35",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 10.2.x \u00e0 11.1.x ant\u00e9rieures \u00e0 11.1.14",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "GlobalProtect App versions 6.2.x ant\u00e9rieures \u00e0 6.2.8-h2",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Cortex XSOAR CommvaultSecurityIQ Marketplace versions ant\u00e9rieures \u00e0 1.2.0",
      "product": {
        "name": "Cortex XSOAR",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Cortex XSOAR versions ant\u00e9rieures \u00e0 8.13.0.11 sur Linux",
      "product": {
        "name": "Cortex XSOAR",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 12.1.x ant\u00e9rieures \u00e0 12.1.5",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "GlobalProtect App versions 6.3.x ant\u00e9rieures \u00e0 6.3.3-h1",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Cortex XSIAM CommvaultSecurityIQ Marketplace versions ant\u00e9rieures \u00e0 1.2.0",
      "product": {
        "name": "Cortex XSIAM",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-9998",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9998"
    },
    {
      "name": "CVE-2026-9873",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9873"
    },
    {
      "name": "CVE-2026-9911",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9911"
    },
    {
      "name": "CVE-2026-9961",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9961"
    },
    {
      "name": "CVE-2026-9124",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9124"
    },
    {
      "name": "CVE-2026-9942",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9942"
    },
    {
      "name": "CVE-2026-9989",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9989"
    },
    {
      "name": "CVE-2026-9952",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9952"
    },
    {
      "name": "CVE-2026-9905",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9905"
    },
    {
      "name": "CVE-2026-0274",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0274"
    },
    {
      "name": "CVE-2026-9877",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9877"
    },
    {
      "name": "CVE-2026-8554",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8554"
    },
    {
      "name": "CVE-2026-8559",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8559"
    },
    {
      "name": "CVE-2026-8547",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8547"
    },
    {
      "name": "CVE-2026-8542",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8542"
    },
    {
      "name": "CVE-2026-9900",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9900"
    },
    {
      "name": "CVE-2026-9890",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9890"
    },
    {
      "name": "CVE-2026-0268",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0268"
    },
    {
      "name": "CVE-2026-9914",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9914"
    },
    {
      "name": "CVE-2026-9115",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9115"
    },
    {
      "name": "CVE-2026-8562",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8562"
    },
    {
      "name": "CVE-2026-8513",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8513"
    },
    {
      "name": "CVE-2026-8560",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8560"
    },
    {
      "name": "CVE-2026-9985",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9985"
    },
    {
      "name": "CVE-2026-8534",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8534"
    },
    {
      "name": "CVE-2026-9949",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9949"
    },
    {
      "name": "CVE-2026-10006",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10006"
    },
    {
      "name": "CVE-2026-9898",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9898"
    },
    {
      "name": "CVE-2026-0273",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0273"
    },
    {
      "name": "CVE-2026-8531",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8531"
    },
    {
      "name": "CVE-2026-9912",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9912"
    },
    {
      "name": "CVE-2026-9901",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9901"
    },
    {
      "name": "CVE-2026-8578",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8578"
    },
    {
      "name": "CVE-2026-8565",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8565"
    },
    {
      "name": "CVE-2026-8520",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8520"
    },
    {
      "name": "CVE-2026-9968",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9968"
    },
    {
      "name": "CVE-2026-9882",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9882"
    },
    {
      "name": "CVE-2026-9974",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9974"
    },
    {
      "name": "CVE-2026-8536",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8536"
    },
    {
      "name": "CVE-2026-9118",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9118"
    },
    {
      "name": "CVE-2026-9947",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9947"
    },
    {
      "name": "CVE-2026-9976",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9976"
    },
    {
      "name": "CVE-2026-9935",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9935"
    },
    {
      "name": "CVE-2026-9893",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9893"
    },
    {
      "name": "CVE-2026-9971",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9971"
    },
    {
      "name": "CVE-2026-9940",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9940"
    },
    {
      "name": "CVE-2026-8587",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8587"
    },
    {
      "name": "CVE-2026-9973",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9973"
    },
    {
      "name": "CVE-2026-9110",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9110"
    },
    {
      "name": "CVE-2026-9943",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9943"
    },
    {
      "name": "CVE-2026-10019",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10019"
    },
    {
      "name": "CVE-2026-9937",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9937"
    },
    {
      "name": "CVE-2026-8571",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8571"
    },
    {
      "name": "CVE-2026-8556",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8556"
    },
    {
      "name": "CVE-2026-8543",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8543"
    },
    {
      "name": "CVE-2026-9895",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9895"
    },
    {
      "name": "CVE-2026-9936",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9936"
    },
    {
      "name": "CVE-2026-9894",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9894"
    },
    {
      "name": "CVE-2026-10004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10004"
    },
    {
      "name": "CVE-2026-9999",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9999"
    },
    {
      "name": "CVE-2026-8557",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8557"
    },
    {
      "name": "CVE-2026-9121",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9121"
    },
    {
      "name": "CVE-2026-0272",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0272"
    },
    {
      "name": "CVE-2026-9958",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9958"
    },
    {
      "name": "CVE-2026-8538",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8538"
    },
    {
      "name": "CVE-2026-9954",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9954"
    },
    {
      "name": "CVE-2026-8526",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8526"
    },
    {
      "name": "CVE-2026-9970",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9970"
    },
    {
      "name": "CVE-2026-9951",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9951"
    },
    {
      "name": "CVE-2026-9918",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9918"
    },
    {
      "name": "CVE-2026-10001",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10001"
    },
    {
      "name": "CVE-2026-8523",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8523"
    },
    {
      "name": "CVE-2026-9992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9992"
    },
    {
      "name": "CVE-2026-9889",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9889"
    },
    {
      "name": "CVE-2026-9950",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9950"
    },
    {
      "name": "CVE-2026-9883",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9883"
    },
    {
      "name": "CVE-2026-8549",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8549"
    },
    {
      "name": "CVE-2026-8530",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8530"
    },
    {
      "name": "CVE-2026-9996",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9996"
    },
    {
      "name": "CVE-2026-9913",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9913"
    },
    {
      "name": "CVE-2026-8541",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8541"
    },
    {
      "name": "CVE-2026-9930",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9930"
    },
    {
      "name": "CVE-2026-8535",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8535"
    },
    {
      "name": "CVE-2026-9965",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9965"
    },
    {
      "name": "CVE-2026-8515",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8515"
    },
    {
      "name": "CVE-2026-8583",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8583"
    },
    {
      "name": "CVE-2026-9876",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9876"
    },
    {
      "name": "CVE-2026-9879",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9879"
    },
    {
      "name": "CVE-2026-9872",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9872"
    },
    {
      "name": "CVE-2026-9875",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9875"
    },
    {
      "name": "CVE-2026-9963",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9963"
    },
    {
      "name": "CVE-2026-9922",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9922"
    },
    {
      "name": "CVE-2026-9975",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9975"
    },
    {
      "name": "CVE-2026-9931",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9931"
    },
    {
      "name": "CVE-2026-9980",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9980"
    },
    {
      "name": "CVE-2026-10000",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10000"
    },
    {
      "name": "CVE-2026-9904",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9904"
    },
    {
      "name": "CVE-2026-8533",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8533"
    },
    {
      "name": "CVE-2026-10007",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10007"
    },
    {
      "name": "CVE-2026-8585",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8585"
    },
    {
      "name": "CVE-2026-9116",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9116"
    },
    {
      "name": "CVE-2026-9983",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9983"
    },
    {
      "name": "CVE-2026-8527",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8527"
    },
    {
      "name": "CVE-2026-10014",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10014"
    },
    {
      "name": "CVE-2026-10022",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10022"
    },
    {
      "name": "CVE-2026-9892",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9892"
    },
    {
      "name": "CVE-2026-8584",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8584"
    },
    {
      "name": "CVE-2026-9880",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9880"
    },
    {
      "name": "CVE-2026-8517",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8517"
    },
    {
      "name": "CVE-2026-9979",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9979"
    },
    {
      "name": "CVE-2026-10011",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10011"
    },
    {
      "name": "CVE-2026-9978",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9978"
    },
    {
      "name": "CVE-2026-8579",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8579"
    },
    {
      "name": "CVE-2026-10020",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10020"
    },
    {
      "name": "CVE-2026-9899",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9899"
    },
    {
      "name": "CVE-2026-10015",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10015"
    },
    {
      "name": "CVE-2026-8573",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8573"
    },
    {
      "name": "CVE-2026-9969",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9969"
    },
    {
      "name": "CVE-2026-8569",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8569"
    },
    {
      "name": "CVE-2026-9123",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9123"
    },
    {
      "name": "CVE-2026-9919",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9919"
    },
    {
      "name": "CVE-2026-8545",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8545"
    },
    {
      "name": "CVE-2026-8529",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8529"
    },
    {
      "name": "CVE-2026-8561",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8561"
    },
    {
      "name": "CVE-2026-9920",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9920"
    },
    {
      "name": "CVE-2026-9921",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9921"
    },
    {
      "name": "CVE-2026-9977",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9977"
    },
    {
      "name": "CVE-2026-9878",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9878"
    },
    {
      "name": "CVE-2026-9888",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9888"
    },
    {
      "name": "CVE-2026-9113",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9113"
    },
    {
      "name": "CVE-2026-9923",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9923"
    },
    {
      "name": "CVE-2026-9909",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9909"
    },
    {
      "name": "CVE-2026-9962",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9962"
    },
    {
      "name": "CVE-2026-9881",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9881"
    },
    {
      "name": "CVE-2026-8546",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8546"
    },
    {
      "name": "CVE-2026-10010",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10010"
    },
    {
      "name": "CVE-2026-9945",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9945"
    },
    {
      "name": "CVE-2026-9956",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9956"
    },
    {
      "name": "CVE-2026-8522",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8522"
    },
    {
      "name": "CVE-2026-8544",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8544"
    },
    {
      "name": "CVE-2026-10008",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10008"
    },
    {
      "name": "CVE-2026-8540",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8540"
    },
    {
      "name": "CVE-2026-9927",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9927"
    },
    {
      "name": "CVE-2026-9120",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9120"
    },
    {
      "name": "CVE-2026-8555",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8555"
    },
    {
      "name": "CVE-2026-9944",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9944"
    },
    {
      "name": "CVE-2026-9948",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9948"
    },
    {
      "name": "CVE-2026-9117",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9117"
    },
    {
      "name": "CVE-2026-9902",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9902"
    },
    {
      "name": "CVE-2026-9988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9988"
    },
    {
      "name": "CVE-2026-9925",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9925"
    },
    {
      "name": "CVE-2026-8528",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8528"
    },
    {
      "name": "CVE-2026-0269",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0269"
    },
    {
      "name": "CVE-2026-8570",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8570"
    },
    {
      "name": "CVE-2026-9114",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9114"
    },
    {
      "name": "CVE-2026-9928",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9928"
    },
    {
      "name": "CVE-2026-8512",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8512"
    },
    {
      "name": "CVE-2026-9886",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9886"
    },
    {
      "name": "CVE-2026-10021",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10021"
    },
    {
      "name": "CVE-2026-9957",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9957"
    },
    {
      "name": "CVE-2026-10005",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10005"
    },
    {
      "name": "CVE-2026-9896",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9896"
    },
    {
      "name": "CVE-2026-9915",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9915"
    },
    {
      "name": "CVE-2026-9990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9990"
    },
    {
      "name": "CVE-2026-9907",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9907"
    },
    {
      "name": "CVE-2026-9932",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9932"
    },
    {
      "name": "CVE-2026-8553",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8553"
    },
    {
      "name": "CVE-2026-10016",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10016"
    },
    {
      "name": "CVE-2026-8566",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8566"
    },
    {
      "name": "CVE-2026-8551",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8551"
    },
    {
      "name": "CVE-2026-8577",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8577"
    },
    {
      "name": "CVE-2026-9997",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9997"
    },
    {
      "name": "CVE-2026-8539",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8539"
    },
    {
      "name": "CVE-2026-8525",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8525"
    },
    {
      "name": "CVE-2026-8563",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8563"
    },
    {
      "name": "CVE-2026-9994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9994"
    },
    {
      "name": "CVE-2026-8514",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8514"
    },
    {
      "name": "CVE-2026-9874",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9874"
    },
    {
      "name": "CVE-2026-8509",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8509"
    },
    {
      "name": "CVE-2026-10017",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10017"
    },
    {
      "name": "CVE-2026-9929",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9929"
    },
    {
      "name": "CVE-2026-9984",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9984"
    },
    {
      "name": "CVE-2026-8521",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8521"
    },
    {
      "name": "CVE-2026-9885",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9885"
    },
    {
      "name": "CVE-2026-8524",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8524"
    },
    {
      "name": "CVE-2026-8558",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8558"
    },
    {
      "name": "CVE-2026-8564",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8564"
    },
    {
      "name": "CVE-2026-9887",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9887"
    },
    {
      "name": "CVE-2026-9910",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9910"
    },
    {
      "name": "CVE-2026-0270",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0270"
    },
    {
      "name": "CVE-2026-8580",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8580"
    },
    {
      "name": "CVE-2026-9906",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9906"
    },
    {
      "name": "CVE-2026-9111",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9111"
    },
    {
      "name": "CVE-2026-9917",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9917"
    },
    {
      "name": "CVE-2026-9959",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9959"
    },
    {
      "name": "CVE-2026-8516",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8516"
    },
    {
      "name": "CVE-2026-8567",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8567"
    },
    {
      "name": "CVE-2026-9908",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9908"
    },
    {
      "name": "CVE-2026-9946",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9946"
    },
    {
      "name": "CVE-2026-9903",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9903"
    },
    {
      "name": "CVE-2026-9993",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9993"
    },
    {
      "name": "CVE-2026-8510",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8510"
    },
    {
      "name": "CVE-2026-9966",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9966"
    },
    {
      "name": "CVE-2026-8576",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8576"
    },
    {
      "name": "CVE-2026-9955",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9955"
    },
    {
      "name": "CVE-2026-9953",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9953"
    },
    {
      "name": "CVE-2026-9967",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9967"
    },
    {
      "name": "CVE-2026-8568",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8568"
    },
    {
      "name": "CVE-2026-0271",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0271"
    },
    {
      "name": "CVE-2026-9960",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9960"
    },
    {
      "name": "CVE-2026-8582",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8582"
    },
    {
      "name": "CVE-2026-9916",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9916"
    },
    {
      "name": "CVE-2026-10018",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10018"
    },
    {
      "name": "CVE-2026-8518",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8518"
    },
    {
      "name": "CVE-2026-8586",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8586"
    },
    {
      "name": "CVE-2026-8575",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8575"
    },
    {
      "name": "CVE-2026-9982",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9982"
    },
    {
      "name": "CVE-2026-9986",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9986"
    },
    {
      "name": "CVE-2026-10013",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10013"
    },
    {
      "name": "CVE-2026-8572",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8572"
    },
    {
      "name": "CVE-2026-10003",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10003"
    },
    {
      "name": "CVE-2026-9981",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9981"
    },
    {
      "name": "CVE-2026-9112",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9112"
    },
    {
      "name": "CVE-2026-9933",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9933"
    },
    {
      "name": "CVE-2026-8548",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8548"
    },
    {
      "name": "CVE-2026-8532",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8532"
    },
    {
      "name": "CVE-2026-9938",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9938"
    },
    {
      "name": "CVE-2026-9934",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9934"
    },
    {
      "name": "CVE-2026-8574",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8574"
    },
    {
      "name": "CVE-2026-9991",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9991"
    },
    {
      "name": "CVE-2026-8581",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8581"
    },
    {
      "name": "CVE-2026-9939",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9939"
    },
    {
      "name": "CVE-2026-9897",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9897"
    },
    {
      "name": "CVE-2026-9926",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9926"
    },
    {
      "name": "CVE-2026-9972",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9972"
    },
    {
      "name": "CVE-2026-9987",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9987"
    },
    {
      "name": "CVE-2026-9995",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9995"
    },
    {
      "name": "CVE-2026-0266",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0266"
    },
    {
      "name": "CVE-2026-9126",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9126"
    },
    {
      "name": "CVE-2026-9964",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9964"
    },
    {
      "name": "CVE-2026-0267",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0267"
    },
    {
      "name": "CVE-2026-10002",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10002"
    },
    {
      "name": "CVE-2026-8537",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8537"
    },
    {
      "name": "CVE-2026-8519",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8519"
    },
    {
      "name": "CVE-2026-8550",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8550"
    },
    {
      "name": "CVE-2026-10009",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10009"
    },
    {
      "name": "CVE-2026-8511",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8511"
    },
    {
      "name": "CVE-2026-9924",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9924"
    },
    {
      "name": "CVE-2026-10012",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10012"
    },
    {
      "name": "CVE-2026-9891",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9891"
    },
    {
      "name": "CVE-2026-9941",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9941"
    },
    {
      "name": "CVE-2026-9884",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9884"
    },
    {
      "name": "CVE-2026-8552",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8552"
    }
  ],
  "initial_release_date": "2026-06-11T00:00:00",
  "last_revision_date": "2026-06-11T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0734",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-06-11T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Palo Alto Networks. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Palo Alto Networks",
  "vendor_advisories": [
    {
      "published_at": "2026-06-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0273",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0273"
    },
    {
      "published_at": "2026-06-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0269",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0269"
    },
    {
      "published_at": "2026-06-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0266",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0266"
    },
    {
      "published_at": "2026-06-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0268",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0268"
    },
    {
      "published_at": "2026-06-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0270",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0270"
    },
    {
      "published_at": "2026-06-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks PAN-SA-2026-0008",
      "url": "https://security.paloaltonetworks.com/PAN-SA-2026-0008"
    },
    {
      "published_at": "2026-06-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0272",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0272"
    },
    {
      "published_at": "2026-06-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0271",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0271"
    },
    {
      "published_at": "2026-06-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0274",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0274"
    },
    {
      "published_at": "2026-06-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0267",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0267"
    }
  ]
}

CERTFR-2026-AVI-0596

Vulnerability from certfr_avis - Published: 2026-05-15 - Updated: 2026-05-15

De multiples vulnérabilités ont été découvertes dans les produits Palo Alto Networks. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

L'éditeur indique que des correctifs seront publiés le 28 mai 2026.

Impacted products

Vendor	Product	Description
Palo Alto Networks	N/A	WildFire WF-500 et WF-500-B versions 12.1.4 antérieures à 12.1.4-h5
Palo Alto Networks	GlobalProtect App	GlobalProtect App versions 6.0.x antérieures à 6.0.14 pour Android et ChromeOS
Palo Alto Networks	Prisma Access Browser	Prisma Access versions 10.2.x antérieures à 10.2.10-h36
Palo Alto Networks	PAN-OS	PAN-OS versions 11.2.12
Palo Alto Networks	N/A	Prisma SD-WAN ION versions 6.3.x antérieures à 6.3.6-b10
Palo Alto Networks	N/A	WildFire WF-500 et WF-500-B versions 11.1.13 antérieures à 11.1.13-h5
Palo Alto Networks	GlobalProtect App	GlobalProtect App versions 6.0.x antérieures à 6.0.11 pour Linux
Palo Alto Networks	N/A	WildFire WF-500 et WF-500-B versions 11.2.10 antérieures à 11.2.10-h6
Palo Alto Networks	GlobalProtect App	GlobalProtect App versions 6.1.x antérieures à 6.1.13 pour Android et ChomeOS
Palo Alto Networks	PAN-OS	PAN-OS versions 11.2.7 antérieures à 11.2.7-h14
Palo Alto Networks	Prisma Access Browser	Prisma Access Agent versions 25.x et 26.x antérieures à 26.2.1 pour Android et ChromeOS
Palo Alto Networks	N/A	WildFire WF-500 et WF-500-B versions 10.2.7 antérieures à 10.2.7-h34
Palo Alto Networks	PAN-OS	PAN-OS versions 11.2.4 antérieures à 11.2.4-h17
Palo Alto Networks	N/A	WildFire WF-500 et WF-500-B versions 11.1.6 antérieures à 11.1.6-h32
Palo Alto Networks	N/A	Prisma SD-WAN ION versions 6.5.x antérieures à 6.5.3-b15
Palo Alto Networks	N/A	WildFire WF-500 et WF-500-B versions 10.2.13 antérieures à 10.2.13-h21
Palo Alto Networks	PAN-OS	PAN-OS versions 11.1.15
Palo Alto Networks	N/A	Prisma SD-WAN ION versions 6.4.x antérieures à 6.4.3-b8
Palo Alto Networks	PAN-OS	PAN-OS versions 10.2.7 antérieures à 10.2.7-h34
Palo Alto Networks	N/A	Chronosphere Chronocollector versions antérieures à v0.116.0
Palo Alto Networks	PAN-OS	PAN-OS versions 12.1.7
Palo Alto Networks	N/A	Broker VM versions 30.0.x antérieures à 30.0.24
Palo Alto Networks	N/A	WildFire WF-500 et WF-500-B versions 11.1.7 antérieures à 11.1.7-h6
Palo Alto Networks	N/A	WildFire WF-500 et WF-500-B versions 11.1.10 antérieures à 11.1.10-h25
Palo Alto Networks	N/A	Trust Protection Foundation versions 24.1.x antérieures à 24.1.13
Palo Alto Networks	PAN-OS	PAN-OS versions 11.1.10 antérieures à 11.1.10-h25
Palo Alto Networks	N/A	WildFire WF-500 et WF-500-B versions 11.2.12
Palo Alto Networks	PAN-OS	PAN-OS versions 11.2.10 antérieures à 11.2.10-h7
Palo Alto Networks	GlobalProtect App	GlobalProtect App versions 6.0.x antérieures à 6.0.13 pour macOS et Windows
Palo Alto Networks	PAN-OS	PAN-OS versions 10.2.16 antérieures à 10.2.16-h7
Palo Alto Networks	PAN-OS	PAN-OS versions 11.1.7 antérieures à 11.1.7-h6
Palo Alto Networks	PAN-OS	PAN-OS versions 12.1.4 antérieures à 12.1.4-h5
Palo Alto Networks	Prisma Access Browser	Prisma Browser versions antérieures à 148.6.3.96
Palo Alto Networks	N/A	Trust Protection Foundation versions 24.3.x antérieures à 24.3.6
Palo Alto Networks	N/A	WildFire WF-500 et WF-500-B versions 11.1.4 antérieures à 11.1.4-h33
Palo Alto Networks	PAN-OS	PAN-OS versions 11.1.4 antérieures à 11.1.4-h33
Palo Alto Networks	N/A	WildFire WF-500 et WF-500-B versions 10.2.10 antérieures à 10.2.10-h36
Palo Alto Networks	N/A	WildFire WF-500 et WF-500-B versions 10.2.18 antérieures à 10.2.18-h6
Palo Alto Networks	N/A	Trust Protection Foundation versions 25.3.x antérieures à 25.3.3
Palo Alto Networks	PAN-OS	PAN-OS versions 12.1.4 antérieures à 12.1.4-h6
Palo Alto Networks	PAN-OS	PAN-OS versions 11.2.10 antérieures à 11.2.10-h6
Palo Alto Networks	Prisma Access Browser	Prisma Access Agent (Endpoint DLP) versions 25.x à 26.x antérieures à 26.2.1 pour Windows et macOS
Palo Alto Networks	PAN-OS	PAN-OS versions 10.2.18 antérieures à 10.2.18-h6
Palo Alto Networks	Prisma Access Browser	Prisma Access versions 11.2.x antérieures à 11.2.7-h13
Palo Alto Networks	N/A	WildFire WF-500 et WF-500-B versions 10.2.16 antérieures à 10.2.16-h7
Palo Alto Networks	GlobalProtect App	GlobalProtect App versions 6.3.x antérieures à 6.3.3-h2 pour Linux
Palo Alto Networks	N/A	GlobalProtect UWP App versions 6.3 antérieures à 6.3.3-h10
Palo Alto Networks	N/A	WildFire WF-500 et WF-500-B versions 11.1.15
Palo Alto Networks	GlobalProtect App	GlobalProtect App versions 6.3.x antérieures à 6.3.3-h10 pour Windows et macOS
Palo Alto Networks	N/A	WildFire WF-500 et WF-500-B versions 11.2.7 antérieures à 11.2.7-h13
Palo Alto Networks	GlobalProtect App	GlobalProtect App versions 6.2.x antérieures à 6.2.8-h10 (6.2.8-948)
Palo Alto Networks	N/A	WildFire WF-500 et WF-500-B versions 11.2.4 antérieures à 11.2.4-h17
Palo Alto Networks	PAN-OS	PAN-OS versions 11.1.6 antérieures à 11.1.6-h32
Palo Alto Networks	PAN-OS	PAN-OS versions 11.1.13 antérieures à 11.1.13-h5
Palo Alto Networks	PAN-OS	PAN-OS versions 10.2.10 antérieures à 10.2.10-h36
Palo Alto Networks	PAN-OS	PAN-OS versions 11.2.7 antérieures à 11.2.7-h13
Palo Alto Networks	N/A	WildFire WF-500 et WF-500-B versions 12.1.7
Palo Alto Networks	N/A	Trust Protection Foundation versions 25.1.x antérieures à 25.1.8
Palo Alto Networks	PAN-OS	PAN-OS versions 10.2.13 antérieures à 10.2.13-h21

References

Title

Publication Time

Tags

Bulletin de sécurité Palo Alto Networks CVE-2026-0242	2026-05-13	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0251	2026-05-13	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0238	2026-05-13	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0263	2026-05-13	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0259	2026-05-13	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0257	2026-05-13	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0262	2026-05-13	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0243	2026-05-13	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0247	2026-05-13	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0261	2026-05-13	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0240	2026-05-13	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0239	2026-05-13	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0248	2026-05-13	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0246	2026-05-13	vendor-advisory
Bulletin de sécurité Palo Alto Networks PAN-SA-2026-0007	2026-05-13	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0265	2026-05-13	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0250	2026-05-13	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0264	2026-05-13	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0256	2026-05-13	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0241	2026-05-13	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0245	2026-05-13	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0258	2026-05-13	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0249	2026-05-13	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0244	2026-05-13	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "WildFire WF-500 et WF-500-B versions 12.1.4 ant\u00e9rieures \u00e0 12.1.4-h5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "GlobalProtect App versions 6.0.x ant\u00e9rieures \u00e0 6.0.14 pour Android et ChromeOS",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Prisma Access versions 10.2.x ant\u00e9rieures \u00e0 10.2.10-h36",
      "product": {
        "name": "Prisma Access Browser",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.2.12",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Prisma SD-WAN ION versions 6.3.x ant\u00e9rieures \u00e0 6.3.6-b10",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "WildFire WF-500 et WF-500-B versions 11.1.13 ant\u00e9rieures \u00e0 11.1.13-h5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "GlobalProtect App versions 6.0.x ant\u00e9rieures \u00e0 6.0.11 pour Linux",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "WildFire WF-500 et WF-500-B versions 11.2.10 ant\u00e9rieures \u00e0 11.2.10-h6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "GlobalProtect App versions 6.1.x ant\u00e9rieures \u00e0 6.1.13 pour Android et ChomeOS",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.2.7 ant\u00e9rieures \u00e0 11.2.7-h14",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Prisma Access Agent versions 25.x et 26.x ant\u00e9rieures \u00e0 26.2.1 pour Android et ChromeOS",
      "product": {
        "name": "Prisma Access Browser",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "WildFire WF-500 et WF-500-B versions 10.2.7 ant\u00e9rieures \u00e0 10.2.7-h34",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.2.4 ant\u00e9rieures \u00e0 11.2.4-h17",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "WildFire WF-500 et WF-500-B versions 11.1.6 ant\u00e9rieures \u00e0 11.1.6-h32",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Prisma SD-WAN ION versions 6.5.x ant\u00e9rieures \u00e0 6.5.3-b15",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "WildFire WF-500 et WF-500-B versions 10.2.13 ant\u00e9rieures \u00e0 10.2.13-h21",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.1.15",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Prisma SD-WAN ION versions 6.4.x ant\u00e9rieures \u00e0 6.4.3-b8",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 10.2.7 ant\u00e9rieures \u00e0 10.2.7-h34",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Chronosphere Chronocollector  versions ant\u00e9rieures \u00e0 v0.116.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 12.1.7",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Broker VM versions 30.0.x ant\u00e9rieures \u00e0 30.0.24",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "WildFire WF-500 et WF-500-B versions 11.1.7 ant\u00e9rieures \u00e0 11.1.7-h6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "WildFire WF-500 et WF-500-B versions 11.1.10 ant\u00e9rieures \u00e0 11.1.10-h25",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Trust Protection Foundation versions 24.1.x ant\u00e9rieures \u00e0 24.1.13",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.1.10 ant\u00e9rieures \u00e0 11.1.10-h25",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "WildFire WF-500 et WF-500-B versions 11.2.12",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.2.10 ant\u00e9rieures \u00e0 11.2.10-h7",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "GlobalProtect App versions 6.0.x ant\u00e9rieures \u00e0 6.0.13 pour macOS et Windows",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 10.2.16 ant\u00e9rieures \u00e0 10.2.16-h7",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.1.7 ant\u00e9rieures \u00e0 11.1.7-h6",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 12.1.4 ant\u00e9rieures \u00e0 12.1.4-h5",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Prisma Browser versions ant\u00e9rieures \u00e0 148.6.3.96",
      "product": {
        "name": "Prisma Access Browser",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Trust Protection Foundation versions 24.3.x ant\u00e9rieures \u00e0 24.3.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "WildFire WF-500 et WF-500-B versions 11.1.4 ant\u00e9rieures \u00e0 11.1.4-h33",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.1.4 ant\u00e9rieures \u00e0 11.1.4-h33",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "WildFire WF-500 et WF-500-B versions 10.2.10 ant\u00e9rieures \u00e0 10.2.10-h36",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "WildFire WF-500 et WF-500-B versions 10.2.18 ant\u00e9rieures \u00e0 10.2.18-h6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Trust Protection Foundation versions 25.3.x ant\u00e9rieures \u00e0 25.3.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 12.1.4 ant\u00e9rieures \u00e0 12.1.4-h6",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.2.10 ant\u00e9rieures \u00e0 11.2.10-h6",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Prisma Access Agent (Endpoint DLP) versions 25.x \u00e0 26.x ant\u00e9rieures \u00e0 26.2.1 pour Windows et macOS",
      "product": {
        "name": "Prisma Access Browser",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 10.2.18 ant\u00e9rieures \u00e0 10.2.18-h6",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Prisma Access versions 11.2.x ant\u00e9rieures \u00e0 11.2.7-h13",
      "product": {
        "name": "Prisma Access Browser",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "WildFire WF-500 et WF-500-B versions 10.2.16 ant\u00e9rieures \u00e0 10.2.16-h7",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "GlobalProtect App versions 6.3.x ant\u00e9rieures \u00e0 6.3.3-h2 pour Linux",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "GlobalProtect UWP App versions 6.3 ant\u00e9rieures \u00e0 6.3.3-h10",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "WildFire WF-500 et WF-500-B versions 11.1.15",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "GlobalProtect App versions 6.3.x ant\u00e9rieures \u00e0 6.3.3-h10 pour Windows et macOS",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "WildFire WF-500 et WF-500-B versions 11.2.7 ant\u00e9rieures \u00e0 11.2.7-h13",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "GlobalProtect App versions 6.2.x ant\u00e9rieures \u00e0 6.2.8-h10 (6.2.8-948)",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "WildFire WF-500 et WF-500-B versions 11.2.4 ant\u00e9rieures \u00e0 11.2.4-h17",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.1.6 ant\u00e9rieures \u00e0 11.1.6-h32",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.1.13 ant\u00e9rieures \u00e0 11.1.13-h5",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 10.2.10 ant\u00e9rieures \u00e0 10.2.10-h36",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.2.7 ant\u00e9rieures \u00e0 11.2.7-h13",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "WildFire WF-500 et WF-500-B versions 12.1.7",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Trust Protection Foundation versions 25.1.x ant\u00e9rieures \u00e0 25.1.8",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 10.2.13 ant\u00e9rieures \u00e0 10.2.13-h21",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "L\u0027\u00e9diteur indique que des correctifs seront publi\u00e9s le 28 mai 2026.",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-4678",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4678"
    },
    {
      "name": "CVE-2026-4448",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4448"
    },
    {
      "name": "CVE-2026-5914",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5914"
    },
    {
      "name": "CVE-2026-5289",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5289"
    },
    {
      "name": "CVE-2026-4460",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4460"
    },
    {
      "name": "CVE-2026-5886",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5886"
    },
    {
      "name": "CVE-2026-4445",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4445"
    },
    {
      "name": "CVE-2026-5278",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5278"
    },
    {
      "name": "CVE-2026-4444",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4444"
    },
    {
      "name": "CVE-2026-4673",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4673"
    },
    {
      "name": "CVE-2026-0264",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0264"
    },
    {
      "name": "CVE-2026-0241",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0241"
    },
    {
      "name": "CVE-2026-0251",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0251"
    },
    {
      "name": "CVE-2026-4456",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4456"
    },
    {
      "name": "CVE-2026-5272",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5272"
    },
    {
      "name": "CVE-2026-7359",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-7359"
    },
    {
      "name": "CVE-2026-4464",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4464"
    },
    {
      "name": "CVE-2026-8022",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8022"
    },
    {
      "name": "CVE-2026-7361",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-7361"
    },
    {
      "name": "CVE-2026-5291",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5291"
    },
    {
      "name": "CVE-2026-4457",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4457"
    },
    {
      "name": "CVE-2026-4461",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4461"
    },
    {
      "name": "CVE-2026-5876",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5876"
    },
    {
      "name": "CVE-2026-6921",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6921"
    },
    {
      "name": "CVE-2026-4447",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4447"
    },
    {
      "name": "CVE-2026-5284",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5284"
    },
    {
      "name": "CVE-2026-5881",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5881"
    },
    {
      "name": "CVE-2026-5282",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5282"
    },
    {
      "name": "CVE-2026-0249",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0249"
    },
    {
      "name": "CVE-2026-4442",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4442"
    },
    {
      "name": "CVE-2026-0263",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0263"
    },
    {
      "name": "CVE-2026-5283",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5283"
    },
    {
      "name": "CVE-2026-4676",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4676"
    },
    {
      "name": "CVE-2026-0265",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0265"
    },
    {
      "name": "CVE-2026-4675",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4675"
    },
    {
      "name": "CVE-2026-0244",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0244"
    },
    {
      "name": "CVE-2026-0258",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0258"
    },
    {
      "name": "CVE-2026-4446",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4446"
    },
    {
      "name": "CVE-2026-4679",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4679"
    },
    {
      "name": "CVE-2026-4674",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4674"
    },
    {
      "name": "CVE-2026-0256",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0256"
    },
    {
      "name": "CVE-2026-0261",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0261"
    },
    {
      "name": "CVE-2026-5274",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5274"
    },
    {
      "name": "CVE-2026-4463",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4463"
    },
    {
      "name": "CVE-2026-5909",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5909"
    },
    {
      "name": "CVE-2026-0243",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0243"
    },
    {
      "name": "CVE-2026-0242",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0242"
    },
    {
      "name": "CVE-2026-4441",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4441"
    },
    {
      "name": "CVE-2026-0239",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0239"
    },
    {
      "name": "CVE-2026-7981",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-7981"
    },
    {
      "name": "CVE-2026-5276",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5276"
    },
    {
      "name": "CVE-2026-6305",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6305"
    },
    {
      "name": "CVE-2026-0250",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0250"
    },
    {
      "name": "CVE-2026-4439",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4439"
    },
    {
      "name": "CVE-2026-5893",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5893"
    },
    {
      "name": "CVE-2026-5285",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5285"
    },
    {
      "name": "CVE-2026-4452",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4452"
    },
    {
      "name": "CVE-2026-4462",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4462"
    },
    {
      "name": "CVE-2026-4680",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4680"
    },
    {
      "name": "CVE-2026-0237",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0237"
    },
    {
      "name": "CVE-2026-4677",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4677"
    },
    {
      "name": "CVE-2026-5919",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5919"
    },
    {
      "name": "CVE-2026-6361",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6361"
    },
    {
      "name": "CVE-2026-0238",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0238"
    },
    {
      "name": "CVE-2026-8018",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8018"
    },
    {
      "name": "CVE-2026-7363",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-7363"
    },
    {
      "name": "CVE-2026-5273",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5273"
    },
    {
      "name": "CVE-2026-4458",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4458"
    },
    {
      "name": "CVE-2026-4459",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4459"
    },
    {
      "name": "CVE-2026-0246",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0246"
    },
    {
      "name": "CVE-2026-4450",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4450"
    },
    {
      "name": "CVE-2026-5275",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5275"
    },
    {
      "name": "CVE-2026-4455",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4455"
    },
    {
      "name": "CVE-2026-0262",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0262"
    },
    {
      "name": "CVE-2026-5280",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5280"
    },
    {
      "name": "CVE-2026-5286",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5286"
    },
    {
      "name": "CVE-2026-0257",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0257"
    },
    {
      "name": "CVE-2026-5884",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5884"
    },
    {
      "name": "CVE-2026-5287",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5287"
    },
    {
      "name": "CVE-2026-4449",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4449"
    },
    {
      "name": "CVE-2026-5277",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5277"
    },
    {
      "name": "CVE-2026-7343",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-7343"
    },
    {
      "name": "CVE-2026-5292",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5292"
    },
    {
      "name": "CVE-2026-5290",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5290"
    },
    {
      "name": "CVE-2026-0245",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0245"
    },
    {
      "name": "CVE-2026-0248",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0248"
    },
    {
      "name": "CVE-2026-0235",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0235"
    },
    {
      "name": "CVE-2026-4451",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4451"
    },
    {
      "name": "CVE-2026-4440",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4440"
    },
    {
      "name": "CVE-2026-0247",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0247"
    },
    {
      "name": "CVE-2026-0236",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0236"
    },
    {
      "name": "CVE-2026-5281",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5281"
    },
    {
      "name": "CVE-2026-0240",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0240"
    },
    {
      "name": "CVE-2026-4443",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4443"
    },
    {
      "name": "CVE-2026-5288",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5288"
    },
    {
      "name": "CVE-2026-0259",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0259"
    },
    {
      "name": "CVE-2026-5279",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5279"
    },
    {
      "name": "CVE-2026-4453",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4453"
    },
    {
      "name": "CVE-2026-4454",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4454"
    }
  ],
  "initial_release_date": "2026-05-15T00:00:00",
  "last_revision_date": "2026-05-15T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0596",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-05-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Injection SQL (SQLi)"
    },
    {
      "description": "Falsification de requ\u00eates c\u00f4t\u00e9 serveur (SSRF)"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Palo Alto Networks. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Palo Alto Networks",
  "vendor_advisories": [
    {
      "published_at": "2026-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0242",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0242"
    },
    {
      "published_at": "2026-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0251",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0251"
    },
    {
      "published_at": "2026-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0238",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0238"
    },
    {
      "published_at": "2026-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0263",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0263"
    },
    {
      "published_at": "2026-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0259",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0259"
    },
    {
      "published_at": "2026-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0257",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0257"
    },
    {
      "published_at": "2026-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0262",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0262"
    },
    {
      "published_at": "2026-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0243",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0243"
    },
    {
      "published_at": "2026-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0247",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0247"
    },
    {
      "published_at": "2026-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0261",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0261"
    },
    {
      "published_at": "2026-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0240",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0240"
    },
    {
      "published_at": "2026-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0239",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0239"
    },
    {
      "published_at": "2026-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0248",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0248"
    },
    {
      "published_at": "2026-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0246",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0246"
    },
    {
      "published_at": "2026-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks PAN-SA-2026-0007",
      "url": "https://security.paloaltonetworks.com/PAN-SA-2026-0007"
    },
    {
      "published_at": "2026-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0265",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0265"
    },
    {
      "published_at": "2026-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0250",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0250"
    },
    {
      "published_at": "2026-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0264",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0264"
    },
    {
      "published_at": "2026-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0256",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0256"
    },
    {
      "published_at": "2026-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0241",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0241"
    },
    {
      "published_at": "2026-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0245",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0245"
    },
    {
      "published_at": "2026-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0258",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0258"
    },
    {
      "published_at": "2026-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0249",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0249"
    },
    {
      "published_at": "2026-05-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0244",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0244"
    }
  ]
}

CERTFR-2025-AVI-0695

Vulnerability from certfr_avis - Published: 2025-08-14 - Updated: 2025-08-14

De multiples vulnérabilités ont été découvertes dans les produits Palo Alto Networks. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une élévation de privilèges et une atteinte à la confidentialité des données.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Palo Alto Networks	Prisma Access Browser	Prisma Access Browser versions antérieures à 138.53.6.158
Palo Alto Networks	GlobalProtect App	GlobalProtect App versions antérieures à 6.2.8-h3 (6.2.8-c263) pour Windows
Palo Alto Networks	GlobalProtect App	GlobalProtect App versions antérieures à 6.3.3 pour Linux
Palo Alto Networks	PAN-OS	PAN-OS versions 11.2.x antérieures à 11.2.8 sur PA-7500
Palo Alto Networks	GlobalProtect App	GlobalProtect App versions 6.3.x antérieures à 6.3.3-h2 (6.3.3-c676) pour Windows
Palo Alto Networks	Checkov by Prisma Cloud	Checkov by Prisma Cloud versions 3.2.x antérieures à 3.2.449
Palo Alto Networks	PAN-OS	PAN-OS versions 11.1.x antérieures à 11.1.10 sur PA-7500
Palo Alto Networks	Cortex XDR Broker	Cortex XDR Broker VM versions 28.0.x antérieures à 28.0.52

References

Title

Publication Time

Tags

Bulletin de sécurité Palo Alto Networks CVE-2025-2183	2025-08-13	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2025-2180	2025-08-13	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2025-2181	2025-08-13	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2025-2184	2025-08-13	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2025-2182	2025-08-13	vendor-advisory
Bulletin de sécurité Palo Alto Networks PAN-SA-2025-0014	2025-08-13	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Prisma Access Browser versions ant\u00e9rieures \u00e0 138.53.6.158",
      "product": {
        "name": "Prisma Access Browser",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "GlobalProtect App versions ant\u00e9rieures \u00e0 6.2.8-h3 (6.2.8-c263) pour Windows",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "GlobalProtect App versions ant\u00e9rieures \u00e0 6.3.3 pour Linux",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.2.x ant\u00e9rieures \u00e0 11.2.8 sur PA-7500",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "GlobalProtect App versions 6.3.x ant\u00e9rieures \u00e0 6.3.3-h2 (6.3.3-c676) pour Windows",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Checkov by Prisma Cloud versions 3.2.x ant\u00e9rieures \u00e0 3.2.449",
      "product": {
        "name": "Checkov by Prisma Cloud",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.1.x ant\u00e9rieures \u00e0 11.1.10 sur PA-7500",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Cortex XDR Broker VM versions 28.0.x ant\u00e9rieures \u00e0 28.0.52",
      "product": {
        "name": "Cortex XDR Broker",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-2182",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-2182"
    },
    {
      "name": "CVE-2025-2183",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-2183"
    },
    {
      "name": "CVE-2025-7656",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-7656"
    },
    {
      "name": "CVE-2025-7657",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-7657"
    },
    {
      "name": "CVE-2024-5921",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-5921"
    },
    {
      "name": "CVE-2025-2184",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-2184"
    },
    {
      "name": "CVE-2025-8292",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-8292"
    },
    {
      "name": "CVE-2025-6558",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6558"
    },
    {
      "name": "CVE-2025-8010",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-8010"
    },
    {
      "name": "CVE-2025-2181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-2181"
    },
    {
      "name": "CVE-2025-8011",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-8011"
    },
    {
      "name": "CVE-2025-2180",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-2180"
    }
  ],
  "initial_release_date": "2025-08-14T00:00:00",
  "last_revision_date": "2025-08-14T00:00:00",
  "links": [],
  "reference": "CERTFR-2025-AVI-0695",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-08-14T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Palo Alto Networks. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Palo Alto Networks",
  "vendor_advisories": [
    {
      "published_at": "2025-08-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2025-2183",
      "url": "https://security.paloaltonetworks.com/CVE-2025-2183"
    },
    {
      "published_at": "2025-08-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2025-2180",
      "url": "https://security.paloaltonetworks.com/CVE-2025-2180"
    },
    {
      "published_at": "2025-08-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2025-2181",
      "url": "https://security.paloaltonetworks.com/CVE-2025-2181"
    },
    {
      "published_at": "2025-08-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2025-2184",
      "url": "https://security.paloaltonetworks.com/CVE-2025-2184"
    },
    {
      "published_at": "2025-08-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2025-2182",
      "url": "https://security.paloaltonetworks.com/CVE-2025-2182"
    },
    {
      "published_at": "2025-08-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks PAN-SA-2025-0014",
      "url": "https://security.paloaltonetworks.com/PAN-SA-2025-0014"
    }
  ]
}

CERTFR-2025-AVI-0630

Vulnerability from certfr_avis - Published: 2025-07-29 - Updated: 2025-07-29

Une vulnérabilité a été découverte dans Palo Alto Networks GlobalProtect App. Elle permet à un attaquant de provoquer un contournement de la politique de sécurité.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

	Vendor	Product	Description
	Palo Alto Networks	GlobalProtect App	GlobalProtect App versions antérieures à 6.2.9 sur Linux

References

Title

Publication Time

Tags

Bulletin de sécurité Palo Alto Networks CVE-2025-2179

2025-07-28

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "GlobalProtect App versions ant\u00e9rieures \u00e0 6.2.9 sur Linux",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-2179",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-2179"
    }
  ],
  "initial_release_date": "2025-07-29T00:00:00",
  "last_revision_date": "2025-07-29T00:00:00",
  "links": [],
  "reference": "CERTFR-2025-AVI-0630",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-07-29T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Palo Alto Networks GlobalProtect App. Elle permet \u00e0 un attaquant de provoquer un contournement de la politique de s\u00e9curit\u00e9.",
  "title": "Vuln\u00e9rabilit\u00e9 dans Palo Alto Networks GlobalProtect App",
  "vendor_advisories": [
    {
      "published_at": "2025-07-28",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2025-2179",
      "url": "https://security.paloaltonetworks.com/CVE-2025-2179"
    }
  ]
}

CERTFR-2025-AVI-0582

Vulnerability from certfr_avis - Published: 2025-07-10 - Updated: 2025-07-10

De multiples vulnérabilités ont été découvertes dans les produits Palo Alto Networks. Elles permettent à un attaquant de provoquer une élévation de privilèges, un contournement de la politique de sécurité et un problème de sécurité non spécifié par l'éditeur.

Palo Alto Networks indique que la vulnérabilité CVE-2025-6554, qui affecte Prisma Access Browser, est activement exploitée.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Palo Alto Networks	N/A	Autonomous Digital Experience Manager versions 5.6.x antérieures à 5.6.7 sur macOS
Palo Alto Networks	GlobalProtect App	GlobalProtect App versions 6.2.x antérieures à 6.2.8 sur Linux (disponibilité prévue pour le 11 juillet 2025)
Palo Alto Networks	GlobalProtect App	GlobalProtect App versions 6.2.x antérieures à 6.2.8-h2 (6.2.8-c243) sur macOS et Windows
Palo Alto Networks	GlobalProtect App	GlobalProtect App versions 6.1.x et GlobalProtect App versions 6.0.x
Palo Alto Networks	GlobalProtect App	GlobalProtect App versions 6.3.x antérieures à 6.3.3-h1 (6.3.3-c650) sur macOS et Windows
Palo Alto Networks	Prisma Access Browser	Prisma Access Browser versions antérieures à 138.33.5.97

References

Title

Publication Time

Tags

Bulletin de sécurité Palo Alto Networks CVE-2025-0139	2025-07-09	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2025-0140	2025-07-09	vendor-advisory
Bulletin de sécurité Palo Alto Networks PAN-SA-2025-0012	2025-07-09	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2025-0141	2025-07-09	vendor-advisory
Bulletin de sécurité Palo Alto Networks PAN-SA-2025-0013	2025-07-09	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Autonomous Digital Experience Manager versions 5.6.x ant\u00e9rieures \u00e0 5.6.7 sur macOS",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "GlobalProtect App versions 6.2.x ant\u00e9rieures \u00e0 6.2.8 sur Linux (disponibilit\u00e9 pr\u00e9vue pour le 11 juillet 2025)",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "GlobalProtect App versions 6.2.x ant\u00e9rieures \u00e0 6.2.8-h2 (6.2.8-c243) sur macOS et Windows",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "GlobalProtect App versions 6.1.x et GlobalProtect App versions 6.0.x  ",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "GlobalProtect App versions 6.3.x ant\u00e9rieures \u00e0 6.3.3-h1 (6.3.3-c650) sur macOS et Windows",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Prisma Access Browser versions ant\u00e9rieures \u00e0 138.33.5.97",
      "product": {
        "name": "Prisma Access Browser",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2023-46218",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-46218"
    },
    {
      "name": "CVE-2020-13434",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-13434"
    },
    {
      "name": "CVE-2023-38546",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-38546"
    },
    {
      "name": "CVE-2025-5959",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-5959"
    },
    {
      "name": "CVE-2023-28322",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-28322"
    },
    {
      "name": "CVE-2021-20305",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-20305"
    },
    {
      "name": "CVE-2025-6192",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6192"
    },
    {
      "name": "CVE-2019-5827",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-5827"
    },
    {
      "name": "CVE-2021-27918",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27918"
    },
    {
      "name": "CVE-2022-30633",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-30633"
    },
    {
      "name": "CVE-2025-0140",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-0140"
    },
    {
      "name": "CVE-2023-3978",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3978"
    },
    {
      "name": "CVE-2025-6557",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6557"
    },
    {
      "name": "CVE-2022-1962",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-1962"
    },
    {
      "name": "CVE-2023-28321",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-28321"
    },
    {
      "name": "CVE-2020-15358",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-15358"
    },
    {
      "name": "CVE-2025-0139",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-0139"
    },
    {
      "name": "CVE-2022-28131",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-28131"
    },
    {
      "name": "CVE-2019-13751",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-13751"
    },
    {
      "name": "CVE-2025-0141",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-0141"
    },
    {
      "name": "CVE-2025-6556",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6556"
    },
    {
      "name": "CVE-2023-27536",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-27536"
    },
    {
      "name": "CVE-2020-29652",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-29652"
    },
    {
      "name": "CVE-2019-13750",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-13750"
    },
    {
      "name": "CVE-2020-14040",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-14040"
    },
    {
      "name": "CVE-2024-1086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-1086"
    },
    {
      "name": "CVE-2025-6191",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6191"
    },
    {
      "name": "CVE-2025-6554",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6554"
    },
    {
      "name": "CVE-2025-5958",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-5958"
    },
    {
      "name": "CVE-2024-34155",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-34155"
    },
    {
      "name": "CVE-2019-19603",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19603"
    },
    {
      "name": "CVE-2020-9283",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-9283"
    },
    {
      "name": "CVE-2020-13435",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-13435"
    },
    {
      "name": "CVE-2025-6555",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-6555"
    }
  ],
  "initial_release_date": "2025-07-10T00:00:00",
  "last_revision_date": "2025-07-10T00:00:00",
  "links": [],
  "reference": "CERTFR-2025-AVI-0582",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-07-10T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Palo Alto Networks. Elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, un contournement de la politique de s\u00e9curit\u00e9 et un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.\n\nPalo Alto Networks indique que la vuln\u00e9rabilit\u00e9 CVE-2025-6554, qui affecte Prisma Access Browser, est activement exploit\u00e9e.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Palo Alto Networks",
  "vendor_advisories": [
    {
      "published_at": "2025-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2025-0139",
      "url": "https://security.paloaltonetworks.com/CVE-2025-0139"
    },
    {
      "published_at": "2025-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2025-0140",
      "url": "https://security.paloaltonetworks.com/CVE-2025-0140"
    },
    {
      "published_at": "2025-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks PAN-SA-2025-0012",
      "url": "https://security.paloaltonetworks.com/PAN-SA-2025-0012"
    },
    {
      "published_at": "2025-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2025-0141",
      "url": "https://security.paloaltonetworks.com/CVE-2025-0141"
    },
    {
      "published_at": "2025-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks PAN-SA-2025-0013",
      "url": "https://security.paloaltonetworks.com/PAN-SA-2025-0013"
    }
  ]
}

Find a vulnerability

Search criteria

100 vulnerabilities found for GlobalProtect App by Palo Alto Networks

CVE-2026-0299 (GCVE-0-2026-0299)

CVE-2026-0298 (GCVE-0-2026-0298)

CVE-2026-0297 (GCVE-0-2026-0297)

CVE-2026-0296 (GCVE-0-2026-0296)

CVE-2026-0295 (GCVE-0-2026-0295)

CVE-2026-0267 (GCVE-0-2026-0267)

CVE-2026-0251 (GCVE-0-2026-0251)

CVE-2026-0250 (GCVE-0-2026-0250)

CVE-2026-0249 (GCVE-0-2026-0249)

CVE-2025-2183 (GCVE-0-2025-2183)

CVE-2025-2179 (GCVE-0-2025-2179)

CVE-2025-0141 (GCVE-0-2025-0141)

CVE-2025-0140 (GCVE-0-2025-0140)

CVE-2026-0299 (GCVE-0-2026-0299)

CVE-2026-0298 (GCVE-0-2026-0298)

CVE-2026-0297 (GCVE-0-2026-0297)

CVE-2026-0296 (GCVE-0-2026-0296)

CVE-2026-0295 (GCVE-0-2026-0295)

CVE-2026-0267 (GCVE-0-2026-0267)

CVE-2026-0249 (GCVE-0-2026-0249)

CVE-2026-0250 (GCVE-0-2026-0250)

CVE-2026-0251 (GCVE-0-2026-0251)

CVE-2025-2183 (GCVE-0-2025-2183)

CVE-2025-2179 (GCVE-0-2025-2179)

CERTFR-2026-AVI-1014

Solutions

CERTFR-2026-AVI-0734

Solutions

CERTFR-2026-AVI-0596

Solutions

CERTFR-2025-AVI-0695

Solutions

CERTFR-2025-AVI-0630

Solutions

CERTFR-2025-AVI-0582

Solutions