CVE-2026-0296 in GlobalProtect Appinformación

Resumen

por MITRE • 2026-08-13

Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. VPN tunnel traffic is not impacted.

The GlobalProtect app on iOS, Android, and Chrome OS is not affected.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Responsable

Palo Alto

Reservar

2025-11-03

Divulgación

2026-08-13

Moderación

aceptado

Artículo

VDB-389327

CPE

listo

EPSS

0.00000

KEV

no

Actividades

bajo

Fuentes

Want to know what is going to be exploited?

We predict KEV entries!