Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

GlobalProtect App: Improper Certificate Validation Bypass Vulnerability

🗓️ 12 Aug 2026 16:00:00Reported by Palo Alto Networks Product Security Incident Response TeamType 
paloalto
 paloalto🔗 security.paloaltonetworks.com👁 2 Views

Improper certificate validation in GlobalProtect app allows MitM to intercept and modify traffic.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
attackerkb
ATTACKERKB		CVE-2026-0296
13 Aug 202601:59
–attackerkb
bdu_fstec
BDU FSTEC		The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to errors in the certificate validation process. This allows attackers to carry out “man-in-the-middle” attacks.
7 Sep 202600:00
–bdu_fstec
circl
Circl		CVE-2026-0296
12 Aug 202619:03
–circl
cve
CVE		CVE-2026-0296
13 Aug 202601:59
–cve
cvelist
Cvelist		CVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability
13 Aug 202601:59
–cvelist
euvd
EUVD		EUVD-2026-57710
13 Aug 202601:59
–euvd
nvd
NVD		CVE-2026-0296
13 Aug 202603:16
–nvd
nessus
Tenable Nessus		Palo Alto GlobalProtect App MacOS 6.0.x < 6.0.15 / 6.2.x < 6.2.8-h13 / 6.3.x < 6.3.3-h14 Multiple Vulnerabilities (Global Un-Protect)
1 Sep 202600:00
–nessus
nessus
Tenable Nessus		Palo Alto GlobalProtect App 6.0.x < 6.0.15 / 6.2.x < 6.2.8-h13 / 6.3.x < 6.3.3-h14 Multiple Vulnerabilities (Global Un-Protect)
1 Sep 202600:00
–nessus
ptsecurity
Positive Technologies		PT-2026-71379
13 Aug 202600:00
–ptsecurity
Rows per page
Vulners
Node
OR
paloaltonetworksglobalprotectMatch6.3.3linux
paloaltonetworksglobalprotectMatch6.3.2linux
paloaltonetworksglobalprotectMatch6.3.1linux
paloaltonetworksglobalprotectMatch6.3.0linux
paloaltonetworksglobalprotectMatch6.2.9linux
paloaltonetworksglobalprotectMatch6.2.8-c982linux
paloaltonetworksglobalprotectMatch6.2.8-c948linux
paloaltonetworksglobalprotectMatch6.2.8-c910linux
paloaltonetworksglobalprotectMatch6.2.8-c471linux
paloaltonetworksglobalprotectMatch6.2.8-c431linux
paloaltonetworksglobalprotectMatch6.2.8-c416linux
paloaltonetworksglobalprotectMatch6.2.8-c317linux
paloaltonetworksglobalprotectMatch6.2.8-c263linux
paloaltonetworksglobalprotectMatch6.2.8-c243linux
paloaltonetworksglobalprotectMatch6.2.8linux
paloaltonetworksglobalprotectMatch6.2.7linux
paloaltonetworksglobalprotectMatch6.2.6linux
paloaltonetworksglobalprotectMatch6.2.4linux
paloaltonetworksglobalprotectMatch6.2.3linux
paloaltonetworksglobalprotectMatch6.2.2linux
paloaltonetworksglobalprotectMatch6.2.1linux
paloaltonetworksglobalprotectMatch6.2.0linux
paloaltonetworksglobalprotectMatch6.0.14linux
paloaltonetworksglobalprotectMatch6.0.13linux
paloaltonetworksglobalprotectMatch6.0.12linux
paloaltonetworksglobalprotectMatch6.0.11linux
paloaltonetworksglobalprotectMatch6.0.10linux
paloaltonetworksglobalprotectMatch6.0.8linux
paloaltonetworksglobalprotectMatch6.0.7linux
paloaltonetworksglobalprotectMatch6.0.6linux
paloaltonetworksglobalprotectMatch6.0.5linux
paloaltonetworksglobalprotectMatch6.0.4linux
paloaltonetworksglobalprotectMatch6.0.3linux
paloaltonetworksglobalprotectMatch6.0.2linux
paloaltonetworksglobalprotectMatch6.0.1linux
paloaltonetworksglobalprotectMatch6.0.0linux
paloaltonetworksglobalprotectMatch6.3.3macos
paloaltonetworksglobalprotectMatch6.3.3windows
paloaltonetworksglobalprotectMatch6.3.2macos
paloaltonetworksglobalprotectMatch6.3.2windows
paloaltonetworksglobalprotectMatch6.3.1macos
paloaltonetworksglobalprotectMatch6.3.1windows
paloaltonetworksglobalprotectMatch6.3.0macos
paloaltonetworksglobalprotectMatch6.3.0windows
paloaltonetworksglobalprotectMatch6.2.9macos
paloaltonetworksglobalprotectMatch6.2.9windows
paloaltonetworksglobalprotectMatch6.2.8-c982macos
paloaltonetworksglobalprotectMatch6.2.8-c982windows
paloaltonetworksglobalprotectMatch6.2.8-c948macos
paloaltonetworksglobalprotectMatch6.2.8-c948windows
paloaltonetworksglobalprotectMatch6.2.8-c910macos
paloaltonetworksglobalprotectMatch6.2.8-c910windows
paloaltonetworksglobalprotectMatch6.2.8-c471macos
paloaltonetworksglobalprotectMatch6.2.8-c471windows
paloaltonetworksglobalprotectMatch6.2.8-c431macos
paloaltonetworksglobalprotectMatch6.2.8-c431windows
paloaltonetworksglobalprotectMatch6.2.8-c416macos
paloaltonetworksglobalprotectMatch6.2.8-c416windows
paloaltonetworksglobalprotectMatch6.2.8-c317macos
paloaltonetworksglobalprotectMatch6.2.8-c317windows
paloaltonetworksglobalprotectMatch6.2.8-c263macos
paloaltonetworksglobalprotectMatch6.2.8-c263windows
paloaltonetworksglobalprotectMatch6.2.8-c243macos
paloaltonetworksglobalprotectMatch6.2.8-c243windows
paloaltonetworksglobalprotectMatch6.2.8macos
paloaltonetworksglobalprotectMatch6.2.8windows
paloaltonetworksglobalprotectMatch6.2.7macos
paloaltonetworksglobalprotectMatch6.2.7windows
paloaltonetworksglobalprotectMatch6.2.6macos
paloaltonetworksglobalprotectMatch6.2.6windows
paloaltonetworksglobalprotectMatch6.2.4macos
paloaltonetworksglobalprotectMatch6.2.4windows
paloaltonetworksglobalprotectMatch6.2.3macos
paloaltonetworksglobalprotectMatch6.2.3windows
paloaltonetworksglobalprotectMatch6.2.2macos
paloaltonetworksglobalprotectMatch6.2.2windows
paloaltonetworksglobalprotectMatch6.2.1macos
paloaltonetworksglobalprotectMatch6.2.1windows
paloaltonetworksglobalprotectMatch6.2.0macos
paloaltonetworksglobalprotectMatch6.2.0windows
paloaltonetworksglobalprotectMatch6.0.14macos
paloaltonetworksglobalprotectMatch6.0.14windows
paloaltonetworksglobalprotectMatch6.0.13macos
paloaltonetworksglobalprotectMatch6.0.13windows
paloaltonetworksglobalprotectMatch6.0.12macos
paloaltonetworksglobalprotectMatch6.0.12windows
paloaltonetworksglobalprotectMatch6.0.11macos
paloaltonetworksglobalprotectMatch6.0.11windows
paloaltonetworksglobalprotectMatch6.0.10macos
paloaltonetworksglobalprotectMatch6.0.10windows
paloaltonetworksglobalprotectMatch6.0.8macos
paloaltonetworksglobalprotectMatch6.0.8windows
paloaltonetworksglobalprotectMatch6.0.7macos
paloaltonetworksglobalprotectMatch6.0.7windows
paloaltonetworksglobalprotectMatch6.0.6macos
paloaltonetworksglobalprotectMatch6.0.6windows
paloaltonetworksglobalprotectMatch6.0.5macos
paloaltonetworksglobalprotectMatch6.0.5windows
paloaltonetworksglobalprotectMatch6.0.4macos
paloaltonetworksglobalprotectMatch6.0.4windows
paloaltonetworksglobalprotectMatch6.0.3macos
paloaltonetworksglobalprotectMatch6.0.3windows
paloaltonetworksglobalprotectMatch6.0.2macos
paloaltonetworksglobalprotectMatch6.0.2windows
paloaltonetworksglobalprotectMatch6.0.1macos
paloaltonetworksglobalprotectMatch6.0.1windows
paloaltonetworksglobalprotectMatch6.0.0macos
paloaltonetworksglobalprotectMatch6.0.0windows
paloaltonetworksglobalprotectMatch6.3.3ios
paloaltonetworksglobalprotectMatch6.3.3android
paloaltonetworksglobalprotectMatch6.3.3chrome_os
paloaltonetworksglobalprotectMatch6.3.2ios
paloaltonetworksglobalprotectMatch6.3.2android
paloaltonetworksglobalprotectMatch6.3.2chrome_os
paloaltonetworksglobalprotectMatch6.3.1ios
paloaltonetworksglobalprotectMatch6.3.1android
paloaltonetworksglobalprotectMatch6.3.1chrome_os
paloaltonetworksglobalprotectMatch6.3.0ios
paloaltonetworksglobalprotectMatch6.3.0android
paloaltonetworksglobalprotectMatch6.3.0chrome_os
paloaltonetworksglobalprotectMatch6.2.8ios
paloaltonetworksglobalprotectMatch6.2.8android
paloaltonetworksglobalprotectMatch6.2.8chrome_os
paloaltonetworksglobalprotectMatch6.2.7ios
paloaltonetworksglobalprotectMatch6.2.7android
paloaltonetworksglobalprotectMatch6.2.7chrome_os
paloaltonetworksglobalprotectMatch6.2.6ios
paloaltonetworksglobalprotectMatch6.2.6android
paloaltonetworksglobalprotectMatch6.2.6chrome_os
paloaltonetworksglobalprotectMatch6.2.4ios
paloaltonetworksglobalprotectMatch6.2.4android
paloaltonetworksglobalprotectMatch6.2.4chrome_os
paloaltonetworksglobalprotectMatch6.2.3ios
paloaltonetworksglobalprotectMatch6.2.3android
paloaltonetworksglobalprotectMatch6.2.3chrome_os
paloaltonetworksglobalprotectMatch6.2.2ios
paloaltonetworksglobalprotectMatch6.2.2android
paloaltonetworksglobalprotectMatch6.2.2chrome_os
paloaltonetworksglobalprotectMatch6.2.1ios
paloaltonetworksglobalprotectMatch6.2.1android
paloaltonetworksglobalprotectMatch6.2.1chrome_os
paloaltonetworksglobalprotectMatch6.2.0ios
paloaltonetworksglobalprotectMatch6.2.0android
paloaltonetworksglobalprotectMatch6.2.0chrome_os
paloaltonetworksglobalprotectMatch6.0.14ios
paloaltonetworksglobalprotectMatch6.0.14android
paloaltonetworksglobalprotectMatch6.0.14chrome_os
paloaltonetworksglobalprotectMatch6.0.13ios
paloaltonetworksglobalprotectMatch6.0.13android
paloaltonetworksglobalprotectMatch6.0.13chrome_os
paloaltonetworksglobalprotectMatch6.0.12ios
paloaltonetworksglobalprotectMatch6.0.12android
paloaltonetworksglobalprotectMatch6.0.12chrome_os
paloaltonetworksglobalprotectMatch6.0.11ios
paloaltonetworksglobalprotectMatch6.0.11android
paloaltonetworksglobalprotectMatch6.0.11chrome_os
paloaltonetworksglobalprotectMatch6.0.10ios
paloaltonetworksglobalprotectMatch6.0.10android
paloaltonetworksglobalprotectMatch6.0.10chrome_os
paloaltonetworksglobalprotectMatch6.0.8ios
paloaltonetworksglobalprotectMatch6.0.8android
paloaltonetworksglobalprotectMatch6.0.8chrome_os
paloaltonetworksglobalprotectMatch6.0.7ios
paloaltonetworksglobalprotectMatch6.0.7android
paloaltonetworksglobalprotectMatch6.0.7chrome_os
paloaltonetworksglobalprotectMatch6.0.6ios
paloaltonetworksglobalprotectMatch6.0.6android
paloaltonetworksglobalprotectMatch6.0.6chrome_os
paloaltonetworksglobalprotectMatch6.0.5ios
paloaltonetworksglobalprotectMatch6.0.5android
paloaltonetworksglobalprotectMatch6.0.5chrome_os
paloaltonetworksglobalprotectMatch6.0.4ios
paloaltonetworksglobalprotectMatch6.0.4android
paloaltonetworksglobalprotectMatch6.0.4chrome_os
paloaltonetworksglobalprotectMatch6.0.3ios
paloaltonetworksglobalprotectMatch6.0.3android
paloaltonetworksglobalprotectMatch6.0.3chrome_os
paloaltonetworksglobalprotectMatch6.0.2ios
paloaltonetworksglobalprotectMatch6.0.2android
paloaltonetworksglobalprotectMatch6.0.2chrome_os
paloaltonetworksglobalprotectMatch6.0.1ios
paloaltonetworksglobalprotectMatch6.0.1android
paloaltonetworksglobalprotectMatch6.0.1chrome_os
paloaltonetworksglobalprotectMatch6.0.0ios
paloaltonetworksglobalprotectMatch6.0.0android
paloaltonetworksglobalprotectMatch6.0.0chrome_os

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
12 Aug 2026 16:00Current
CVSS 3.17.4
CVSS 47.4
EPSS0.00093
SSVC
GlobalProtect AppCertificate ValidationMitM AccessTraffic InterceptionUnauthenticated AttackerNo Mitigation
2