Vulnerability-Lookup

CERTFR-2026-AVI-1014

Vulnerability from certfr_avis - Published: 2026-08-13 - Updated: 2026-08-13

De multiples vulnérabilités ont été découvertes dans les produits Palo Alto Networks. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Palo Alto Networks	PAN-OS	PAN-OS versions 11.1.x antérieures à 11.1.17
Palo Alto Networks	Cloud NGFW	Cloud NGFW sans les derniers correctifs de sécurité
Palo Alto Networks	GlobalProtect App	GlobalProtect App versions antérieures à 6.2.x antérieures à 6.2.8-h13 pour Windows et macOS
Palo Alto Networks	GlobalProtect App	GlobalProtect App versions antérieures à 6.0.x antérieures à 6.0.15
Palo Alto Networks	PAN-OS	PAN-OS versions antérieures à 10.2.8
Palo Alto Networks	Prisma Access	Prisma Access Agent versions antérieures à 26.3 pour Windows et macOS
Palo Alto Networks	GlobalProtect App	GlobalProtect App versions antérieures à 6.3.x antérieures à 6.3.3-h14 pour Windows et macOS
Palo Alto Networks	Prisma Access	Prisma Access versions antérieures à 10.2.10
Palo Alto Networks	Prisma Access	Prisma Access Agent versions antérieures à 26.2.2 pour Linux
Palo Alto Networks	GlobalProtect App	GlobalProtect App versions antérieures à 6.3.x antérieures à 6.3.3-h15 pour Linux
Palo Alto Networks	Prisma Access Browser	Prisma Browser versions antérieures à 150.49.8.187

References

Title

Publication Time

CVE-2026-0289 (GCVE-0-2026-0289)

Vulnerability from cvelistv5 – Published: 2026-08-13 01:44 – Updated: 2026-08-13 13:18

Title

Prisma Browser: Inappropriate Implementation in Account Protection

Summary

A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user to bypass intended security controls.

Severity

0.5 (Low)


                        
                          CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-13 13:17 UTC

CWE

CWE-522 - Insufficiently Protected Credentials

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0289	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Palo Alto Networks	Prisma Browser	Affected: 0 , < 150.49.4.125 (custom)

Date Public

2026-08-12 16:00

Credits

Palo Alto Networks thanks Thomas Villanueva for discovering and reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0289",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-13T13:17:29.230433Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-13T13:18:31.156Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Prisma Browser",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "150.49.4.125",
                  "status": "unaffected"
                }
              ],
              "lessThan": "150.49.4.125",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cspan\u003eThis issue is applicable only to Prisma\u00ae Browser with \u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/prisma-access-browser/administration/account-protection-for-the-prisma-browser\"\u003e\u003cspan\u003eAccount Protection\u003c/span\u003e\u003c/a\u003e\u003cspan\u003e enabled.\u003c/span\u003e\u003c/p\u003e\u003cp\u003e\u003cspan\u003eThis can be verified by checking:\u003c/span\u003e\u003c/p\u003e\u003col\u003e\u003cli\u003e\u003cspan\u003eNavigate to \u003c/span\u003e\u003cb\u003eLogin Controls\u003c/b\u003e\u0026nbsp;settings\u003c/li\u003e\u003cli\u003e\"\u003cb\u003eActivate account protection\u003c/b\u003e\"\u003cspan\u003e checkbox is enabled\u003c/span\u003e\u003c/li\u003e\u003c/ol\u003e"
            }
          ],
          "value": "This issue is applicable only to Prisma\u00ae Browser with Account Protection (https://docs.paloaltonetworks.com/prisma-access-browser/administration/account-protection-for-the-prisma-browser) enabled.\n\nThis can be verified by checking:\n\n 1. Navigate to Login Controls settings\n 2. \"Activate account protection\" checkbox is enabled"
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:prisma_browser:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "150.49.4.125",
                  "versionStartIncluding": "150.49.4",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Palo Alto Networks thanks Thomas Villanueva for discovering and reporting this issue."
        }
      ],
      "datePublic": "2026-08-12T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A  security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma\u00ae Browser enables\u0026nbsp;a user to bypass intended security controls."
            }
          ],
          "value": "A  security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma\u00ae Browser enables\u00a0a user to bypass intended security controls."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-37",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-37 Retrieve Embedded Sensitive Data"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "LOCAL",
            "baseScore": 0.5,
            "baseSeverity": "LOW",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-522",
              "description": "CWE-522 Insufficiently Protected Credentials",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T01:44:29.032Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0289"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                \u003ctd\u003ePrisma Browser\u003cbr\u003e\u003c/td\u003e\n                                \n                                \u003ctd\u003eUpgrade to 150.49.4.125 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION          SUGGESTED SOLUTION\nPrisma Browser   Upgrade to 150.49.4.125 or later."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "Prisma Browser: Inappropriate Implementation in Account Protection",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No known workarounds exist for this issue."
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_affectedList": [
        "Prisma Access Browser with Account Protection enabled"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0289",
    "datePublished": "2026-08-13T01:44:29.032Z",
    "dateReserved": "2025-11-03T20:44:47.234Z",
    "dateUpdated": "2026-08-13T13:18:31.156Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0290 (GCVE-0-2026-0290)

Vulnerability from cvelistv5 – Published: 2026-08-13 01:45 – Updated: 2026-08-13 13:43

Title

Prisma Browser: Sensitive Information Disclosure Vulnerability

Summary

An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a local attacker to view sensitive data.

Severity

0.5 (Low)


                        
                          CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-13 13:42 UTC

CWE

CWE-522 - Insufficiently Protected Credentials

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0290	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Palo Alto Networks	Prisma Browser	Affected: 0 , < 148.18.4.217 (custom)

Date Public

2026-08-12 16:00

Credits

Palo Alto Networks thanks Thomas Villanueva for discovering and reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0290",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-13T13:42:55.618746Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-13T13:43:04.567Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Prisma Browser",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "148.18.4.217",
                  "status": "unaffected"
                }
              ],
              "lessThan": "148.18.4.217",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cspan\u003eThis issue is applicable only to Prisma\u00ae Browser with\u0026nbsp;\u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/prisma-access-browser/administration/account-protection-for-the-prisma-browser\"\u003e\u003cspan\u003eAccount Protection\u003c/span\u003e\u003c/a\u003e\u003cspan\u003e enabled.\u003c/span\u003e\u003c/p\u003e\u003cp\u003e\u003cspan\u003eThis can be verified by checking:\u003c/span\u003e\u003c/p\u003e\u003col\u003e\u003cli\u003e\u003cspan\u003eNavigate to\u0026nbsp;\u003c/span\u003e\u003cb\u003eLogin Controls\u003c/b\u003e\u0026nbsp;settings\u003c/li\u003e\u003cli\u003e\"\u003cb\u003eActivate account protection\u003c/b\u003e\"\u003cspan\u003e checkbox is enabled\u003c/span\u003e\u003c/li\u003e\u003c/ol\u003e"
            }
          ],
          "value": "This issue is applicable only to Prisma\u00ae Browser with Account Protection (https://docs.paloaltonetworks.com/prisma-access-browser/administration/account-protection-for-the-prisma-browser) enabled.\n\nThis can be verified by checking:\n\n 1. Navigate to Login Controls settings\n 2. \"Activate account protection\" checkbox is enabled"
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:prisma_browser:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "148.18.4.217",
                  "versionStartIncluding": "148.18.4",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Palo Alto Networks thanks Thomas Villanueva for discovering and reporting this issue."
        }
      ],
      "datePublic": "2026-08-12T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003eAn information disclosure vulnerability in the Account Protection feature of  Palo Alto Networks Prisma\u00ae Browser enables a local attacker to view sensitive data.\u003c/span\u003e"
            }
          ],
          "value": "An information disclosure vulnerability in the Account Protection feature of  Palo Alto Networks Prisma\u00ae Browser enables a local attacker to view sensitive data."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-37",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-37 Retrieve Embedded Sensitive Data"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "LOCAL",
            "baseScore": 0.5,
            "baseSeverity": "LOW",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-522",
              "description": "CWE-522 Insufficiently Protected Credentials",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T01:45:39.372Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0290"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                \u003ctd\u003ePrisma Browser\u003cbr\u003e\u003c/td\u003e\n                                \n                                \u003ctd\u003eUpgrade to 148.18.4.217 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION          SUGGESTED SOLUTION\nPrisma Browser   Upgrade to 148.18.4.217 or later."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "Prisma Browser: Sensitive Information Disclosure Vulnerability",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No known workarounds exist for this issue."
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_affectedList": [
        "Prisma Browser 148.18.0",
        "Prisma Browser 148.18.1",
        "Prisma Browser 148.18.2",
        "Prisma Browser 148.18.3"
      ],
      "x_cpeGeneratedAt": "2026-08-12T02:10:57.965Z",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0290",
    "datePublished": "2026-08-13T01:45:39.372Z",
    "dateReserved": "2025-11-03T20:44:48.137Z",
    "dateUpdated": "2026-08-13T13:43:04.567Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0291 (GCVE-0-2026-0291)

Vulnerability from cvelistv5 – Published: 2026-08-13 01:47 – Updated: 2026-08-13 13:23

Title

Prisma Access Agent: Authenticated Limited File Deletion on Linux

Summary

An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma® Access Agent on Linux platforms that enables a local low privileged user to delete system files in a limited scope and disable Prisma Access Agent. The Prisma Access Agent on macOS, Windows, iOS, Android, and Chrome OS is not affected.

Severity

1.1 (Low)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-13 13:21 UTC

CWE

CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0291	vendor-advisory

Impacted products

2 products

Vendor	Product	Version
Palo Alto Networks	Prisma Access Agent	Affected: 0 , < 26.2.2 (custom)
Palo Alto Networks	Prisma Access Agent	Unaffected: All (custom)

Date Public

2026-08-12 16:00

Credits

an internal reporter

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0291",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-13T13:21:52.108031Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-13T13:23:00.167Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "Prisma Access Agent",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "26.2.2",
                  "status": "unaffected"
                }
              ],
              "lessThan": "26.2.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS",
            "Windows",
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "Prisma Access Agent",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:prisma_access_agent:*:*:*:*:*:Linux:*:*",
                  "versionEndExcluding": "26.2.2",
                  "versionStartIncluding": "25.7",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "an internal reporter"
        }
      ],
      "datePublic": "2026-08-12T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003eAn improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma\u00ae Access Agent on Linux platforms that enables a local low privileged user to delete system files in a limited scope and disable Prisma Access Agent.\u003c/span\u003e\u003cb\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003c/b\u003e\u003cspan\u003eThe Prisma Access Agent on macOS, Windows, iOS, Android, and Chrome OS is not affected.\u003c/span\u003e"
            }
          ],
          "value": "An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma\u00ae Access Agent on Linux platforms that enables a local low privileged user to delete system files in a limited scope and disable Prisma Access Agent.\n\nThe Prisma Access Agent on macOS, Windows, iOS, Android, and Chrome OS is not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-132",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-132 Symlink Attack"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 1.1,
            "baseSeverity": "LOW",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "CWE-59 Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T01:47:59.370Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0291"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003ePrisma Access Agent on Linux\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e25.7 through 26.2.1 \u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 26.2.2 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePrisma Access Agent on macOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePrisma Access Agent on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePrisma Access Agent on iOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePrisma Access Agent on Android\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePrisma Access Agent on Chrome OS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                            MINOR VERSION         SUGGESTED SOLUTION\nPrisma Access Agent on Linux       25.7 through 26.2.1   Upgrade to 26.2.2 or later.\nPrisma Access Agent on macOS                             No action needed.\nPrisma Access Agent on Windows                           No action needed.\nPrisma Access Agent on iOS                               No action needed.\nPrisma Access Agent on Android                           No action needed.\nPrisma Access Agent on Chrome OS                         No action needed."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "Prisma Access Agent: Authenticated Limited File Deletion on Linux",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No known workarounds or mitigations exist for this issue."
            }
          ],
          "value": "No known workarounds or mitigations exist for this issue."
        }
      ],
      "x_affectedList": [
        "Prisma Access Agent 26.2.0",
        "Prisma Access Agent 26.0",
        "Prisma Access Agent 25.0",
        "Prisma Access Agent 24.0"
      ],
      "x_cpeGeneratedAt": "2026-08-12T15:37:11.690Z",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0291",
    "datePublished": "2026-08-13T01:47:59.370Z",
    "dateReserved": "2025-11-03T20:44:48.974Z",
    "dateUpdated": "2026-08-13T13:23:00.167Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0292 (GCVE-0-2026-0292)

Vulnerability from cvelistv5 – Published: 2026-08-13 01:49 – Updated: 2026-08-13 13:27

Title

Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows

Summary

An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® Access Agent on Windows enables a local administrator to bypass security inspection, subsequently allowing them to inject and intercept arbitrary network traffic. The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is not affected.

Severity

2.1 (Low)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:H/SI:H/SA:L/E:U/AU:N/R:A/V:C/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-13 13:24 UTC

CWE

CWE-290 - Authentication Bypass by Spoofing

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0292	vendor-advisory

Impacted products

2 products

Vendor	Product	Version
Palo Alto Networks	Prisma Access Agent	Affected: 0 , < 26.3 (custom)
Palo Alto Networks	Prisma Access Agent	Unaffected: All (custom)

Date Public

2026-08-12 16:00

Credits

Palo Alto Networks thanks KBTG Cybersecurity Researcher Engineers: Nuttakorn Tungpoonsup, Jirawat Siengphao, Khanatip Vanjongkham, and Waris Damkham for discovering and reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0292",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-13T13:24:21.943544Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-13T13:27:11.458Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "Prisma Access Agent",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "26.3",
                  "status": "unaffected"
                }
              ],
              "lessThan": "26.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux",
            "macOS",
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "Prisma Access Agent",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:prisma_access_agent:*:*:*:*:*:Windows:*:*",
                  "versionEndExcluding": "26.2.2",
                  "versionStartIncluding": "24.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Palo Alto Networks thanks KBTG Cybersecurity Researcher Engineers: Nuttakorn Tungpoonsup, Jirawat Siengphao, Khanatip Vanjongkham, and Waris Damkham for discovering and reporting this issue."
        }
      ],
      "datePublic": "2026-08-12T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003eAn authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma\u00ae Access Agent on Windows enables a local administrator to bypass security inspection, subsequently allowing them to  inject and intercept arbitrary network traffic.\u003cbr\u003e\u003cbr\u003e\u003cspan\u003eThe Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is not affected.\u003c/span\u003e\u003c/span\u003e"
            }
          ],
          "value": "An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma\u00ae Access Agent on Windows enables a local administrator to bypass security inspection, subsequently allowing them to  inject and intercept arbitrary network traffic.\n\nThe Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-151",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-151 Identity Spoofing"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "AUTOMATIC",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 2.1,
            "baseSeverity": "LOW",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "LOW",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "valueDensity": "CONCENTRATED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:H/SI:H/SA:L/E:U/AU:N/R:A/V:C/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-290",
              "description": "CWE-290 Authentication Bypass by Spoofing",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T01:49:19.448Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0292"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003ePrisma Access Agent on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e\u003cspan\u003e24.0 through 26.2.2\u003c/span\u003e \u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 26.3 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePrisma Access Agent on Linux\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePrisma Access Agent on macOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePrisma Access Agent on iOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePrisma Access Agent on Android\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePrisma Access Agent on Chrome OS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                            MINOR VERSION         SUGGESTED SOLUTION\nPrisma Access Agent on Windows     24.0 through 26.2.2   Upgrade to 26.3 or later.\nPrisma Access Agent on Linux                             No action needed.\nPrisma Access Agent on macOS                             No action needed.\nPrisma Access Agent on iOS                               No action needed.\nPrisma Access Agent on Android                           No action needed.\nPrisma Access Agent on Chrome OS                         No action needed."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No known workarounds exist for this issue."
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0292",
    "datePublished": "2026-08-13T01:49:19.448Z",
    "dateReserved": "2025-11-03T20:44:49.864Z",
    "dateUpdated": "2026-08-13T13:27:11.458Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0293 (GCVE-0-2026-0293)

Vulnerability from cvelistv5 – Published: 2026-08-13 01:51 – Updated: 2026-08-13 13:27

Title

Prisma Access Agent: Anti-Tamper Protection Bypass on Windows

Summary

A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator privileges to bypass the anti-tamper protection, enabling unauthorized access to protected processes and files. The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is not affected.

Severity

5.6 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-13 13:27 UTC

CWE

CWE-693 - Protection Mechanism Failure

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0293	vendor-advisory

Impacted products

2 products

Vendor	Product	Version
Palo Alto Networks	Prisma Access Agent	Affected: 0 , < 26.3 (custom)
Palo Alto Networks	Prisma Access Agent	Unaffected: All (custom)

Date Public

2026-08-12 16:00

Credits

Palo Alto Networks thanks Daniel Cuthbert and Vladislav Ovitchinikov from Banco Santander for discovering and reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0293",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-13T13:27:26.711967Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-13T13:27:50.592Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "Prisma Access Agent",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "26.3",
                  "status": "unaffected"
                }
              ],
              "lessThan": "26.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux",
            "macOS",
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "Prisma Access Agent",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:prisma_access_agent:*:*:*:*:*:Windows:*:*",
                  "versionEndExcluding": "26.2.2",
                  "versionStartIncluding": "24.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Palo Alto Networks thanks Daniel Cuthbert and Vladislav Ovitchinikov from Banco Santander for discovering and reporting this issue."
        }
      ],
      "datePublic": "2026-08-12T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003eA vulnerability in Palo Alto Networks \u003cspan\u003ePrisma\u00ae Access Agent\u003c/span\u003e on Windows enables a local attacker with administrator privileges to bypass the anti-tamper protection, enabling unauthorized access to protected processes and files.\u003c/span\u003e\u003cb\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003c/b\u003e\u003cspan\u003eThe Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is not affected.\u003c/span\u003e"
            }
          ],
          "value": "A vulnerability in Palo Alto Networks Prisma\u00ae Access Agent on Windows enables a local attacker with administrator privileges to bypass the anti-tamper protection, enabling unauthorized access to protected processes and files.\n\nThe Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-159",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-159 Redirect Access to Libraries"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-693",
              "description": "CWE-693 Protection Mechanism Failure",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T01:51:07.249Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0293"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003ePrisma Access Agent on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e24.0 through 26.2.2 \u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 26.3 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePrisma Access Agent on macOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePrisma Access Agent on Linux\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePrisma Access Agent on iOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePrisma Access Agent on Android\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePrisma Access Agent on Chrome OS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eAll older unsupported versions\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eUpgrade to a supported fixed version.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                            MINOR VERSION         SUGGESTED SOLUTION\nPrisma Access Agent on Windows     24.0 through 26.2.2   Upgrade to 26.3 or later.\nPrisma Access Agent on macOS                             No action needed.\nPrisma Access Agent on Linux                             No action needed.\nPrisma Access Agent on iOS                               No action needed.\nPrisma Access Agent on Android                           No action needed.\nPrisma Access Agent on Chrome OS                         No action needed.\nAll older unsupported versions                           Upgrade to a supported fixed version."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:00:00.000Z",
          "value": "Initial publication."
        }
      ],
      "title": "Prisma Access Agent: Anti-Tamper Protection Bypass on Windows",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No known workarounds exist for this issue."
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0293",
    "datePublished": "2026-08-13T01:51:07.249Z",
    "dateReserved": "2025-11-03T20:44:51.366Z",
    "dateUpdated": "2026-08-13T13:27:50.592Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0294 (GCVE-0-2026-0294)

Vulnerability from cvelistv5 – Published: 2026-08-13 01:54 – Updated: 2026-08-13 13:29

Title

Prisma Access Agent: Local Privilege Escalation

Summary

A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS devices enables a local user to execute code with elevated privileges. The Prisma Access Agent on Linux, iOS, Android, and ChromeOS is not affected.

Severity

6 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:A/V:C/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-13 13:28 UTC

CWE

CWE-427 - Uncontrolled Search Path Element

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0294	vendor-advisory

Impacted products

2 products

Vendor	Product	Version
Palo Alto Networks	Prisma Access Agent	Affected: 0 , < 26.3 (custom)
Palo Alto Networks	Prisma Access Agent	Unaffected: All (custom)

Date Public

2026-08-12 16:00

Credits

Michael Garrison of State Farm Information Security KBTG Cybersecurity Researcher Engineers: Nuttakorn Tungpoonsup, Jirawat Siengphao, Khanatip Vanjongkham, and Waris Damkham

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0294",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-13T13:28:49.469059Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-13T13:29:18.678Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "macOS"
          ],
          "product": "Prisma Access Agent",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "26.3",
                  "status": "unaffected"
                }
              ],
              "lessThan": "26.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux",
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "Prisma Access Agent",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:prisma_access_agent:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "26.3",
                  "versionStartIncluding": "24.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:prisma_access_agent:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "26.3",
                  "versionStartIncluding": "24.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:prisma_access_agent:all:*:linux:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:prisma_access_agent:all:*:ios:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:prisma_access_agent:all:*:android:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:prisma_access_agent:all:*:chrome_os:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Michael Garrison of State Farm Information Security"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "KBTG Cybersecurity Researcher Engineers: Nuttakorn Tungpoonsup, Jirawat Siengphao, Khanatip Vanjongkham, and Waris Damkham"
        }
      ],
      "datePublic": "2026-08-12T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma\u00ae Access Agent app on Windows and macOS devices enables a local user to execute code with elevated privileges. \u003cb\u003e\u003cbr\u003e\u003cbr\u003e\u003c/b\u003eThe Prisma Access Agent on Linux, iOS, Android, and ChromeOS is not affected."
            }
          ],
          "value": "A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma\u00ae Access Agent app on Windows and macOS devices enables a local user to execute code with elevated privileges. \n\nThe Prisma Access Agent on Linux, iOS, Android, and ChromeOS is not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-233 Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "AUTOMATIC",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "CONCENTRATED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:A/V:C/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-427",
              "description": "CWE-427: Uncontrolled Search Path Element",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T01:54:03.387Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0294"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003ePrisma Access Agent   on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e  24.0\u003cb\u003e\u0026nbsp;\u003c/b\u003ethrough 26.2.2\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 26.3 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003ePrisma Access Agent   on macOS\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e  24.0 through 26.2.2\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 26.3 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePrisma Access Agent on Linux\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePrisma Access Agent on iOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePrisma Access Agent on Android\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePrisma Access Agent on Chrome OS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                            MINOR VERSION         SUGGESTED SOLUTION\nPrisma Access Agent on Windows     24.0 through 26.2.2   Upgrade to 26.3 or later.\nPrisma Access Agent on macOS       24.0 through 26.2.2   Upgrade to 26.3 or later.\nPrisma Access Agent on Linux                             No action needed.\nPrisma Access Agent on iOS                               No action needed.\nPrisma Access Agent on Android                           No action needed.\nPrisma Access Agent on Chrome OS                         No action needed."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:00:00.000Z",
          "value": "Initial publication."
        }
      ],
      "title": "Prisma Access Agent: Local Privilege Escalation",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003eNo known workarounds exist for this issue.\u003c/span\u003e"
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0294",
    "datePublished": "2026-08-13T01:54:03.387Z",
    "dateReserved": "2025-11-03T20:44:52.281Z",
    "dateUpdated": "2026-08-13T13:29:18.678Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0295 (GCVE-0-2026-0295)

Vulnerability from cvelistv5 – Published: 2026-08-13 01:57 – Updated: 2026-08-13 13:20

Title

GlobalProtect App: Local Privilege Escalation via Race Condition on macOS

Summary

A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root. The GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected.

Severity

4.1 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-13 03:55 UTC

CWE

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0295	vendor-advisory

Impacted products

2 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h14 (6.3.3-1121) (custom) Affected: 6.2.0 , < 6.2.8-h13 (6.2.8-1045) (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::macOS::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom)

Date Public

2026-08-12 16:00

Credits

Alex Bourla and Graham Brereton

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0295",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-13T03:55:55.918274Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-13T13:20:22.119Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:macOS:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h14",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h14 (6.3.3-1121)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h13 (6.2.8-1045)",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux",
            "Windows",
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14_6.3.3-1121_",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13_6.2.8-1045_",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:linux:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:windows:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:ios:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:android:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:chrome_os:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Alex Bourla and Graham Brereton"
        }
      ],
      "datePublic": "2026-08-12T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A race condition in the Palo Alto Networks GlobalProtect\u2122 client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root.\u003cbr\u003e\u003cbr\u003eThe GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected."
            }
          ],
          "value": "A race condition in the Palo Alto Networks GlobalProtect\u2122 client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root.\n\nThe GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-29",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-29 Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "LOCAL",
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-362",
              "description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T01:57:22.394Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0295"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3 on macOS\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.3.0 through 6.3.3-h13\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3-h14 (6.3.3-1121) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.2 on macOS\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through 6.2.8-h12\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.2.8-h13 (6.2.8-1045) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u0026nbsp;GlobalProtect App 6.0 on macOS\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Linux\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Chrome OS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                           MINOR VERSION             SUGGESTED SOLUTION\nGlobalProtect App 6.3 on macOS    6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on macOS    6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\n GlobalProtect App 6.0 on macOS   6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App on Linux                                  No action needed.\nGlobalProtect App on Windows                                No action needed.\nGlobalProtect App on iOS                                    No action needed.\nGlobalProtect App on Android                                No action needed.\nGlobalProtect App on Chrome OS                              No action needed."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "GlobalProtect App: Local Privilege Escalation via Race Condition on macOS",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No known workarounds or mitigations exist for this issue.\u0026nbsp;"
            }
          ],
          "value": "No known workarounds or mitigations exist for this issue."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.3",
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.0.14",
        "GlobalProtect App 6.0.13",
        "GlobalProtect App 6.0.12",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_cpeGeneratedAt": "2026-08-12T02:10:58.042Z",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0295",
    "datePublished": "2026-08-13T01:57:22.394Z",
    "dateReserved": "2025-11-03T20:44:53.142Z",
    "dateUpdated": "2026-08-13T13:20:22.119Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0296 (GCVE-0-2026-0296)

Vulnerability from cvelistv5 – Published: 2026-08-13 01:59 – Updated: 2026-08-13 13:29

Title

GlobalProtect App: Improper Certificate Validation Bypass Vulnerability

Summary

Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. VPN tunnel traffic is not impacted. The GlobalProtect app on iOS, Android, and Chrome OS is not affected.

Severity

4.5 (Medium)


                        
                          CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-13 13:29 UTC

CWE

CWE-295 - Improper Certificate Validation

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0296	vendor-advisory

Impacted products

3 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h15 (custom) Affected: 6.2.0 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Linux::
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h14 (custom) Affected: 6.2.0 , < 6.2.8-h13 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Windows::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Chrome_OS::

Date Public

2026-08-12 16:00

Credits

our internal security research teams

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0296",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-13T13:29:34.520951Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-13T13:29:46.735Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Linux:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h15",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS",
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h14",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h14",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h13",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Chrome_OS:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h15",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:linux:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:ios:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:android:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:chrome_os:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "our internal security research teams"
        }
      ],
      "datePublic": "2026-08-12T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003c/p\u003e\u003cspan\u003eImproper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect\u2122 app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. VPN tunnel traffic is not impacted.\u003c/span\u003e\u003cb\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003c/b\u003e\u003cspan\u003eThe GlobalProtect app on iOS, Android, and Chrome OS is not affected.\u003c/span\u003e\u003cp\u003e\u003c/p\u003e"
            }
          ],
          "value": "Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect\u2122 app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. VPN tunnel traffic is not impacted.\n\nThe GlobalProtect app on iOS, Android, and Chrome OS is not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-94",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-94 Man in the Middle Attack"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "ADJACENT",
            "baseScore": 4.5,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-295",
              "description": "CWE-295 Improper Certificate Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T01:59:45.972Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0296"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\n  \u003cthead\u003e\n    \u003ctr\u003e\n      \u003cth\u003eVersion\u003c/th\u003e\n      \u003cth\u003eMinor Version\u003c/th\u003e\n      \u003cth\u003eSuggested Solution\u003c/th\u003e\n    \u003c/tr\u003e\n  \u003c/thead\u003e\n  \u003ctbody\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.3/6.2 on Linux\u003c/td\u003e\n      \u003ctd\u003e6.2.0 through 6.3.3-h14\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.3.3-h15 or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.0 on Linux\u003c/td\u003e\n      \u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.3 on macOS\u003c/td\u003e\n      \u003ctd\u003e6.3.0 through 6.3.3-h13\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.3.3-h14 (6.3.3-1121) or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.2 on macOS\u003c/td\u003e\n      \u003ctd\u003e6.2.0 through 6.2.8-h12\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.2.8-h13 (6.2.8-1045) or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.0 on macOS\u003c/td\u003e\n      \u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.3 on Windows\u003c/td\u003e\n      \u003ctd\u003e6.3.0 through 6.3.3-h13\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.3.3-h14 (6.3.3-1121) or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.2 on Windows\u003c/td\u003e\n      \u003ctd\u003e6.2.0 through 6.2.8-h12\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.2.8-h13 (6.2.8-1045) or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.0 on Windows\u003c/td\u003e\n      \u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App on iOS\u003c/td\u003e\n      \u003ctd\u003e\u003c/td\u003e\n      \u003ctd\u003eNo action needed.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App on Android\u003c/td\u003e\n      \u003ctd\u003e\u003c/td\u003e\n      \u003ctd\u003eNo action needed.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App on Chrome OS\u003c/td\u003e\n      \u003ctd\u003e\u003c/td\u003e\n      \u003ctd\u003eNo action needed.\u003c/td\u003e\n    \u003c/tr\u003e\n  \u003c/tbody\u003e\n\u003c/table\u003e"
            }
          ],
          "value": "VERSION                              MINOR VERSION             SUGGESTED SOLUTION\nGlobalProtect App 6.3/6.2 on Linux   6.2.0 through 6.3.3-h14   Upgrade to 6.3.3-h15 or later.\nGlobalProtect App 6.0 on Linux       6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3 on macOS       6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on macOS       6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.0 on macOS       6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3 on Windows     6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on Windows     6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.0 on Windows     6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App on iOS                                       No action needed.\nGlobalProtect App on Android                                   No action needed.\nGlobalProtect App on Chrome OS                                 No action needed."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "GlobalProtect App: Improper Certificate Validation Bypass Vulnerability",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No known workarounds or mitigations exist for this issue."
            }
          ],
          "value": "No known workarounds or mitigations exist for this issue."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.3",
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.9",
        "GlobalProtect App 6.2.8-c982",
        "GlobalProtect App 6.2.8-c948",
        "GlobalProtect App 6.2.8-c910",
        "GlobalProtect App 6.2.8-c471",
        "GlobalProtect App 6.2.8-c431",
        "GlobalProtect App 6.2.8-c416",
        "GlobalProtect App 6.2.8-c317",
        "GlobalProtect App 6.2.8-c263",
        "GlobalProtect App 6.2.8-c243",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.0.14",
        "GlobalProtect App 6.0.13",
        "GlobalProtect App 6.0.12",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_cpeGeneratedAt": "2026-08-12T02:10:58.092Z",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0296",
    "datePublished": "2026-08-13T01:59:45.972Z",
    "dateReserved": "2025-11-03T20:44:53.961Z",
    "dateUpdated": "2026-08-13T13:29:46.735Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0297 (GCVE-0-2026-0297)

Vulnerability from cvelistv5 – Published: 2026-08-13 02:01 – Updated: 2026-08-13 13:20

Title

GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake

Summary

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man-in-the-middle (MitM) attacker or a rogue gateway to disrupt system processes and potentially execute arbitrary code with elevated privileges (SYSTEM privileges on Windows, and root privileges on macOS and Linux).

Severity

5.2 (Medium)


                        
                          CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-13 03:55 UTC

CWE

CWE-787 - Out-of-bounds Write

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0297	vendor-advisory

Impacted products

3 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h15 (custom) Affected: 6.2.0 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Linux::
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h14 (custom) Affected: 6.2.0 , < 6.2.8-h13 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Windows::
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.5 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Chrome_OS::

Date Public

2026-08-12 16:00

Credits

our internal security research teams

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0297",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-13T03:55:54.896353Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-13T13:20:35.603Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Linux:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h15",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS",
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h14",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h14",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h13",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Chrome_OS:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.5",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.5",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003eNo special configuration is required to be affected by this issue.\u003c/span\u003e"
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h15",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:linux:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:ios:*:*:*:*:*",
                  "versionEndExcluding": "6.3.5",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:android:*:*:*:*:*",
                  "versionEndExcluding": "6.3.5",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:chrome_os:*:*:*:*:*",
                  "versionEndExcluding": "6.3.5",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:ios:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:android:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:chrome_os:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "our internal security research teams"
        }
      ],
      "datePublic": "2026-08-12T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect\u2122 app that enables a man-in-the-middle (MitM) attacker or a rogue gateway to disrupt system processes and potentially execute arbitrary code with elevated privileges (SYSTEM privileges on Windows, and root privileges on macOS and Linux). \u003c/p\u003e"
            }
          ],
          "value": "A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect\u2122 app that enables a man-in-the-middle (MitM) attacker or a rogue gateway to disrupt system processes and potentially execute arbitrary code with elevated privileges (SYSTEM privileges on Windows, and root privileges on macOS and Linux)."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-540",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-540 Overread Buffers"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "ADJACENT",
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T02:01:13.682Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0297"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3/6.2 on Linux\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through 6.3.3-h14\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3-h15 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Linux\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on macOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h13\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h14\u0026nbsp;(6.3.3-1121) or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on macOS\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h12\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h13\u0026nbsp;(6.2.8-1045) or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on macOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h13\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h14 (6.3.3-1121) or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h12\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h13 (6.2.8-1045) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u0026nbsp;\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3/6.1 on iOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.3.4\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.5 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on iOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3/6.1 on Android\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.3.4\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.5 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Android\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3/6.1 on ChromeOS\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.3.4\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.5 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on ChromeOS\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                                 MINOR VERSION             SUGGESTED SOLUTION\nGlobalProtect App 6.3/6.2 on Linux      6.2.0 through 6.3.3-h14   Upgrade to 6.3.3-h15 or later.\nGlobalProtect App 6.0 on Linux          6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3 on macOS          6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on macOS          6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.0 on macOS          6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3 on Windows        6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on Windows        6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.0 on Windows        6.0.0 through 6.0.14      Upgrade to 6.0.15 or later. \nGlobalProtect App 6.3/6.1 on iOS        6.1.0 through 6.3.4       Upgrade to 6.3.5 or later.\nGlobalProtect App 6.0 on iOS            6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3/6.1 on Android    6.1.0 through 6.3.4       Upgrade to 6.3.5 or later.\nGlobalProtect App 6.0 on Android        6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3/6.1 on ChromeOS   6.1.0 through 6.3.4       Upgrade to 6.3.5 or later.\nGlobalProtect App 6.0 on ChromeOS       6.0.0 through 6.0.14      Upgrade to 6.0.15 or later."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eCustomers can mitigate the risk of this issue by taking either of the following three actions:\u003cbr\u003e\u003c/p\u003e\u003col\u003e\u003cli\u003e\u003cp\u003eEnforce SSL-Only VPN Connections:\u0026nbsp;Modify your GlobalProtect Portal configurations to disable IPSec/UDP tunneling, forcing the client applications to connect exclusively via SSL VPN mode.\u0026nbsp;Customer can configure \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/administration/globalprotect-portals/customize-the-globalprotect-app\"\u003eConnect with SSL Only\u003c/a\u003e tunnel by configuring \u0027 Advanced Control for Tunnel Mode Behavior\u0027 on GlobalProtect Portal Network \u0026gt; Portal \u0026gt; Agent Configuration\u0026gt;  Advanced Control for Tunnel Mode Behavior\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eCustomers can configure SSL only tunnel protocol by un-checking \u0027\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/ngfw/help/10-2/globalprotect/network-globalprotect-gateways/globalprotect-gateways-agent-tab/tunnel-settings-tab\"\u003eEnable IPSec\u003c/a\u003e\u0027  on GlobalProtect gateway at\u003cb\u003e\u0026nbsp;\u003c/b\u003e\u003cb\u003eNetwork\u003c/b\u003e \u0026gt; \u003cb\u003eGateway\u003c/b\u003e\u003cb\u003e \u003c/b\u003e\u0026gt;\u003cb\u003e \u003c/b\u003e\u003cb\u003eAgent \u003c/b\u003e\u0026gt; \u003cb\u003eTunnel Setting\u003c/b\u003e \u0026gt; \u003cb\u003eEnable IPSec\u003c/b\u003e\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003e\u003cb\u003eWorkaround\u0026nbsp; for new and existing GlobalProtect app \u0026gt;= 6.2.8 or GlobalProtect app \u0026gt;= 6.3.3 installations on Windows and macOS\u003c/b\u003e \u003cbr\u003eGlobalProtect 6.2.8 and GlobalProtect app 6.3.3 on Windows and macOS introduce a new configuration\u0026nbsp;\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/platform-explorer?productCategoryTags=pan%3Aproductcategory%2Fglobalprotect\"\u003eEnable Strict Certificate Check\u003c/a\u003e which enables certificate checks required to mitigate this issue on Windows and macOS.\u003cbr\u003e\u003cbr\u003eThis configuration only takes effect after the first connection between the GlobalProtect client and the GlobalProtect portal. Therefore the first connection is not protected. To ensure that the first connection is also protected, additionally follow the steps noted below for GlobalProtect \u0026lt; 6.2.8.\u003cbr\u003eThis configuration option is currently not available for the GlobalProtect app on platforms other than Windows and macOS.\u003cbr\u003e\u003cbr\u003e\u003cb\u003eWorkaround for new and existing GlobalProtect app \u0026lt; 6.2.8 or GlobalProtect app \u0026lt; 6.3.3 installations on macOS\u003c/b\u003e\u003cbr\u003e\u003cb\u003e\u003c/b\u003e\u003c/p\u003e\u003col\u003e\u003cli\u003e\u003cp\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-apps/deploy-app-settings-transparently/deploy-app-settings-to-mac-endpoints/deploy-app-settings-in-the-mac-plist\"\u003eUse Xcode to edit the com.paloaltonetworks.GlobalProtect.settings.plist file\u003c/a\u003e\u0026nbsp;in /Library/Preferences.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eAdd a \"Settings\" section if it does not exist within the GlobalProtect section.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eWithin the \"Settings\" section, add the full-chain-cert-verify key and set the string value to yes\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003e\u0026nbsp;Restart macOS.\u003c/p\u003e\u003c/li\u003e\u003c/ol\u003e\u003ctt\u003e\u003ctt\u003e\u2003\u0026lt;key\u0026gt;GlobalProtect\u0026lt;/key\u0026gt;\u003c/tt\u003e\u003cbr\u003e\u003ctt\u003e\u2003\u0026lt;dict\u0026gt;\u003c/tt\u003e\u003cbr\u003e\u003ctt\u003e\u003ctt\u003e\u0026nbsp; \u2003\u0026nbsp; (removed for brevity)\u003c/tt\u003e\u003c/tt\u003e\u003cbr\u003e\u003ctt\u003e\u0026nbsp; \u0026nbsp;\u2003 \u0026lt;key\u0026gt;Settings\u0026lt;/key\u0026gt;\u003c/tt\u003e\u003cbr\u003e\u003ctt\u003e\u0026nbsp; \u2003\u0026nbsp;\u0026lt;dict\u0026gt;\u003c/tt\u003e\u003cbr\u003e\u003ctt\u003e\u0026nbsp; \u0026nbsp; \u0026nbsp;\u2003 \u0026nbsp; \u0026lt;key\u0026gt;full-chain-cert-verify\u0026lt;/key\u0026gt;\u003c/tt\u003e\u003cbr\u003e\u003ctt\u003e\u0026nbsp; \u0026nbsp; \u0026nbsp;\u2003 \u0026nbsp; \u0026lt;string\u0026gt;yes\u0026lt;/string\u0026gt;\u003cbr\u003e\u003c/tt\u003e\u0026nbsp; \u0026nbsp;\u2003\u0026lt;/dict\u0026gt;\u003cbr\u003e\u0026lt;/dict\u0026gt;\u003c/tt\u003e\u003c/li\u003e\u003c/ol\u003e\u003cb\u003e\u2003\u2003\u2003Workaround for new and existing GlobalProtect app installations on Linux\u003cbr\u003e\u003c/b\u003e\u2003\u2003\u2003\u2003\u20031. Create the /opt/paloaltonetworks/globalprotect/pangps.xml pre-deployment configuration file.\u003cbr\u003e\u2003\u2003\u2003\u2003\u20032. Add the pre-deployment settings to the pangps.xml file\u003cbr\u003e\u003ctt\u003e\u2003\u2003\u2003\u003cbr\u003e\u2003\u2003\u2003\u2003\u2003\u2003\u0026lt;GlobalProtect\u0026gt;\u003cbr\u003e\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u0026lt;Settings\u0026gt;\u003cbr\u003e\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u0026lt;full-chain-cert-verify\u0026gt;yes\u0026lt;/full-chain-cert-verify\u0026gt;\u003cbr\u003e\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u0026lt;/Settings\u003cbr\u003e\u2003\u2003\u2003\u2003\u2003\u2003\u0026lt;/GlobalProtect\u0026gt;\u003c/tt\u003e\u003cp\u003e\u003cbr\u003e\u003cb\u003e\u2003\u2003\u2003\u2003Workaround for new and existing GlobalProtect app installations on Android, iOS and ChromeOS\u003c/b\u003e\u003cbr\u003e\u2003\u2003\u2003\u2003Customers can use their endpoint mobile device management (MDM) tools to apply the following changes\u003cbr\u003e\u2003\u2003\u2003\u2003\u2003\u20031. Set the key \"full-chain-cert-verify\"=\"yes\".\u003c/p\u003e\u003cb\u003e\u003c/b\u003e"
            }
          ],
          "value": "Customers can mitigate the risk of this issue by taking either of the following three actions:\n\n\n 1. Enforce SSL-Only VPN Connections: Modify your GlobalProtect Portal configurations to disable IPSec/UDP tunneling, forcing the client applications to connect exclusively via SSL VPN mode. Customer can configure Connect with SSL Only (https://docs.paloaltonetworks.com/globalprotect/administration/globalprotect-portals/customize-the-globalprotect-app) tunnel by configuring \u0027 Advanced Control for Tunnel Mode Behavior\u0027 on GlobalProtect Portal Network \u003e Portal \u003e Agent Configuration\u003e Advanced Control for Tunnel Mode Behavior\n\n 2. Customers can configure SSL only tunnel protocol by un-checking \u0027Enable IPSec (https://docs.paloaltonetworks.com/ngfw/help/10-2/globalprotect/network-globalprotect-gateways/globalprotect-gateways-agent-tab/tunnel-settings-tab)\u0027 on GlobalProtect gateway at Network \u003e Gateway \u003e Agent \u003e Tunnel Setting \u003e Enable IPSec\n\n 3. Workaround  for new and existing GlobalProtect app \u003e= 6.2.8 or GlobalProtect app \u003e= 6.3.3 installations on Windows and macOS\n    GlobalProtect 6.2.8 and GlobalProtect app 6.3.3 on Windows and macOS introduce a new configuration Enable Strict Certificate Check (https://docs.paloaltonetworks.com/platform-explorer?productCategoryTags=pan%3Aproductcategory%2Fglobalprotect) which enables certificate checks required to mitigate this issue on Windows and macOS.\n    \n    This configuration only takes effect after the first connection between the GlobalProtect client and the GlobalProtect portal. Therefore the first connection is not protected. To ensure that the first connection is also protected, additionally follow the steps noted below for GlobalProtect \u003c 6.2.8.\n    This configuration option is currently not available for the GlobalProtect app on platforms other than Windows and macOS.\n    \n    Workaround for new and existing GlobalProtect app \u003c 6.2.8 or GlobalProtect app \u003c 6.3.3 installations on macOS\n    \n    \n    1. Use Xcode to edit the com.paloaltonetworks.GlobalProtect.settings.plist file (https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-apps/deploy-app-settings-transparently/deploy-app-settings-to-mac-endpoints/deploy-app-settings-in-the-mac-plist) in /Library/Preferences.\n    \n    2. Add a \"Settings\" section if it does not exist within the GlobalProtect section.\n    \n    3. Within the \"Settings\" section, add the full-chain-cert-verify key and set the string value to yes\n    \n    4.  Restart macOS.\n    \u2003\u003ckey\u003eGlobalProtect\u003c/key\u003e\n    \u2003\u003cdict\u003e\n      \u2003  (removed for brevity)\n       \u2003 \u003ckey\u003eSettings\u003c/key\u003e\n      \u2003 \u003cdict\u003e\n         \u2003   \u003ckey\u003efull-chain-cert-verify\u003c/key\u003e\n         \u2003   \u003cstring\u003eyes\u003c/string\u003e\n       \u2003\u003c/dict\u003e\n    \u003c/dict\u003e\n\n\u2003\u2003\u2003Workaround for new and existing GlobalProtect app installations on Linux\n\u2003\u2003\u2003\u2003\u20031. Create the /opt/paloaltonetworks/globalprotect/pangps.xml pre-deployment configuration file.\n\u2003\u2003\u2003\u2003\u20032. Add the pre-deployment settings to the pangps.xml file\n\u2003\u2003\u2003\n\u2003\u2003\u2003\u2003\u2003\u2003\u003cGlobalProtect\u003e\n\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u003cSettings\u003e\n\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u003cfull-chain-cert-verify\u003eyes\u003c/full-chain-cert-verify\u003e\n\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u003c/Settings\n\u2003\u2003\u2003\u2003\u2003\u2003\u003c/GlobalProtect\u003e\n\n\n\u2003\u2003\u2003\u2003Workaround for new and existing GlobalProtect app installations on Android, iOS and ChromeOS\n\u2003\u2003\u2003\u2003Customers can use their endpoint mobile device management (MDM) tools to apply the following changes\n\u2003\u2003\u2003\u2003\u2003\u20031. Set the key \"full-chain-cert-verify\"=\"yes\"."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.3",
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.9",
        "GlobalProtect App 6.2.8-c982",
        "GlobalProtect App 6.2.8-c948",
        "GlobalProtect App 6.2.8-c910",
        "GlobalProtect App 6.2.8-c471",
        "GlobalProtect App 6.2.8-c431",
        "GlobalProtect App 6.2.8-c416",
        "GlobalProtect App 6.2.8-c317",
        "GlobalProtect App 6.2.8-c263",
        "GlobalProtect App 6.2.8-c243",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.0.14",
        "GlobalProtect App 6.0.13",
        "GlobalProtect App 6.0.12",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_cpeGeneratedAt": "2026-08-12T02:10:58.171Z",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0297",
    "datePublished": "2026-08-13T02:01:13.682Z",
    "dateReserved": "2025-11-03T20:44:54.801Z",
    "dateUpdated": "2026-08-13T13:20:35.603Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0298 (GCVE-0-2026-0298)

Vulnerability from cvelistv5 – Published: 2026-08-13 02:02 – Updated: 2026-08-13 13:20

Title

GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)

Summary

An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on an affected client. The GlobalProtect app on Linux, macOS, iOS, Android, and Chrome OS is not affected.

Severity

5.2 (Medium)


                        
                          CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-13 03:55 UTC

CWE

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0298	vendor-advisory

Impacted products

2 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h14 (custom) Affected: 6.2.0 , < 6.2.8-h13 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Windows::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom)

Date Public

2026-08-12 16:00

Credits

our internal security research teams

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0298",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-13T03:55:53.877148Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-13T13:20:48.963Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h14",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h14",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h13",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux",
            "macOS",
            "Android",
            "Chrome OS",
            "iOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cspan\u003eThis issue is applicable only to devices configured to use SAML authentication in the GlobalProtect\u003c/span\u003e \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-user-guide/globalprotect-app-for-windows/use-connect-before-logon-followed-by-the-authentication-method\"\u003e\u003cspan\u003eConnect Before Logon\u003c/span\u003e\u003c/a\u003e\u003cspan\u003e feature.\u003c/span\u003e\u003c/p\u003e"
            }
          ],
          "value": "This issue is applicable only to devices configured to use SAML authentication in the GlobalProtect Connect Before Logon (https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-user-guide/globalprotect-app-for-windows/use-connect-before-logon-followed-by-the-authentication-method) feature."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:linux:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:macos:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:android:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:chrome_os:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:ios:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "our internal security research teams"
        }
      ],
      "datePublic": "2026-08-12T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect\u2122 app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on an affected client.\u003cbr\u003e\u003cbr\u003eThe GlobalProtect app on Linux, macOS, iOS, Android, and Chrome OS  is not affected."
            }
          ],
          "value": "An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect\u2122 app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on an affected client.\n\nThe GlobalProtect app on Linux, macOS, iOS, Android, and Chrome OS  is not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-242",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-242 Code Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "ADJACENT",
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T02:02:47.196Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0298"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.3.0 through 6.3.3-h13\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3-h14\u0026nbsp;(6.3.3-1121) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.2 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through 6.2.8-h12\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.2.8-h13\u0026nbsp;(6.2.8-1045) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.0 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App All on macOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App All on Linux\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App All on iOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App All on Android\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App All on Chrome OS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                              MINOR VERSION             SUGGESTED SOLUTION\nGlobalProtect App 6.3 on Windows     6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on Windows     6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.0 on Windows     6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App All on macOS                                 No action needed.\nGlobalProtect App All on Linux                                 No action needed.\nGlobalProtect App All on iOS                                   No action needed.\nGlobalProtect App All on Android                               No action needed.\nGlobalProtect App All on Chrome OS                             No action needed."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cspan\u003eCustomers can mitigate the risk of this issue by taking either of the following actions:\u003c/span\u003e\u003c/p\u003e\u003col\u003e\u003cli\u003e\u003cp\u003e\u003cspan\u003eUse\u0026nbsp;\u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-user-guide/globalprotect-app-for-windows/use-connect-before-logon-followed-by-the-authentication-method\"\u003e\u003cspan\u003eConnect Before Logon (CBL\u003c/span\u003e\u003c/a\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-user-guide/globalprotect-app-for-windows/use-connect-before-logon-followed-by-the-authentication-method\"\u003e\u003cspan\u003e)\u003c/span\u003e\u003c/a\u003e\u0026nbsp;\u003cspan\u003ewithout SAML Authentication\u003c/span\u003e\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003e\u003cspan\u003eUse\u0026nbsp;\u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/administration/globalprotect-quick-configs/remote-access-vpn-with-pre-logon\"\u003e\u003cspan\u003ePre-logon with machine certificate\u003c/span\u003e\u003c/a\u003e\u0026nbsp;\u003cspan\u003einstead of Connect Before Logon (CBL).\u003c/span\u003e\u003c/p\u003e\u003c/li\u003e\u003c/ol\u003e"
            }
          ],
          "value": "Customers can mitigate the risk of this issue by taking either of the following actions:\n\n 1. Use Connect Before Logon (CBL (https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-user-guide/globalprotect-app-for-windows/use-connect-before-logon-followed-by-the-authentication-method)) (https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-user-guide/globalprotect-app-for-windows/use-connect-before-logon-followed-by-the-authentication-method) without SAML Authentication\n\n 2. Use Pre-logon with machine certificate (https://docs.paloaltonetworks.com/globalprotect/administration/globalprotect-quick-configs/remote-access-vpn-with-pre-logon) instead of Connect Before Logon (CBL)."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.3",
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.0.14",
        "GlobalProtect App 6.0.13",
        "GlobalProtect App 6.0.12",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_cpeGeneratedAt": "2026-08-12T02:10:58.226Z",
      "x_cpeManuallyEdited": true,
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0298",
    "datePublished": "2026-08-13T02:02:47.196Z",
    "dateReserved": "2025-11-03T20:44:56.118Z",
    "dateUpdated": "2026-08-13T13:20:48.963Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CERTFR-2026-AVI-1014

Solutions

CVE-2026-0289 (GCVE-0-2026-0289)

CVE-2026-0290 (GCVE-0-2026-0290)

CVE-2026-0291 (GCVE-0-2026-0291)

CVE-2026-0292 (GCVE-0-2026-0292)

CVE-2026-0293 (GCVE-0-2026-0293)

CVE-2026-0294 (GCVE-0-2026-0294)

CVE-2026-0295 (GCVE-0-2026-0295)

CVE-2026-0296 (GCVE-0-2026-0296)

CVE-2026-0297 (GCVE-0-2026-0297)

CVE-2026-0298 (GCVE-0-2026-0298)

Tags

Sightings

Nomenclature