Skip to content
Sign in
4.5 Medium

CVE-2026-0296 Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated…

Description

Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. VPN tunnel traffic is not impacted. The GlobalProtect app on iOS, Android, and Chrome OS is not affected.

Affected products and versions

Product Affected versions Fixed in
GlobalProtect App Versions not published

Other CVEs of GlobalProtect App

The 41 CVEs of GlobalProtect App →
CVE-2026-0314 A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low… 4.3 Medium CVE-2026-0315 A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate… 5.9 Medium CVE-2026-0307 Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user… 5.9 Medium CVE-2026-0299 Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to… 5.9 Medium
Track this CVE