Lucene search
K

126 matches found

RedhatCVE
RedhatCVE
added 2026/05/15 7:57 a.m.2 views

CVE-2026-0249

Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacker to intercept encrypted communications and potentially compromise the endpoint. This can enable a local non-administrative operating system user or an attacker on the same subn...

7.6CVSS5.8AI score0.00007EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/05/14 12:0 a.m.5 views

Palo Alto GlobalProtect App 6.0.x < 6.0.13 / 6.2.x < 6.2.8-h10 / 6.3.x < 6.3.3-h9 Multiple Vulnerabilities

The version of Palo Alto GlobalProtect App installed on the remote host is 6.0.x prior to 6.0.13, 6.2.x prior to 6.2.8-h10, or 6.3.x prior to 6.3.3-h9. It is, therefore, affected by multiple vulnerabilities: - A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect app that...

8.5CVSS6.4AI score0.00007EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/05/14 12:0 a.m.3 views

Palo Alto GlobalProtect App MacOS 6.0.x < 6.0.13 / 6.2.x < 6.2.8-h10 / 6.3.x < 6.3.3-h9 Improper Certificate Validation (CVE-2026-0249)

The version of Palo Alto GlobalProtect App installed on the remote macOS host is 6.0.x prior to 6.0.13, 6.2.x prior to 6.2.8-h10, or 6.3.x prior to 6.3.3-h9. It is, therefore, affected by an improper certificate validation vulnerability: - Multiple improper certificate validation vulnerabilities ...

7.6CVSS5.9AI score0.00007EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/13 9:32 p.m.4 views

EUVD-2026-30102

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...

8.5CVSS6.1AI score0.00007EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/13 9:32 p.m.3 views

EUVD-2026-30100

Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacker to intercept encrypted communications and potentially compromise the endpoint. This can enable a local non-administrative operating system user or an attacker on the same subn...

7.6CVSS5.8AI score0.00007EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/13 6:32 p.m.4 views

CVE-2026-0249

Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacker to intercept encrypted communications and potentially compromise the endpoint. This can enable a local non-administrative operating system user or an attacker on the same subn...

7.6CVSS5.8AI score0.00007EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/13 6:32 p.m.5 views

CVE-2026-0249 GlobalProtect App: Certificate Validation Bypass Vulnerabilities

Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacker to intercept encrypted communications and potentially compromise the endpoint. This can enable a local non-administrative operating system user or an attacker on the same subn...

7.6CVSS5.8AI score0.00007EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/13 6:32 p.m.22 views

CVE-2026-0249 GlobalProtect App: Certificate Validation Bypass Vulnerabilities

Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacker to intercept encrypted communications and potentially compromise the endpoint. This can enable a local non-administrative operating system user or an attacker on the same subn...

7.6CVSS0.00007EPSS
Exploits0References1
CVE
CVE
added 2026/05/13 6:32 p.m.6 views

CVE-2026-0249

CVE-2026-0249 describes multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect app. The provided documents state that the GlobalProtect app is not affected on Linux, Windows, iOS, or GlobalProtect UWP, implying that other platforms may be impacted, but th...

7.6CVSS5.8AI score0.00007EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/13 6:26 p.m.25 views

CVE-2026-0250 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses...

7.7CVSS0.00007EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/13 6:26 p.m.7 views

CVE-2026-0250

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses...

6.4AI score0.00007EPSS
Exploits0References2Affected Software2
CVE
CVE
added 2026/05/13 6:26 p.m.13 views

CVE-2026-0250

The vulnerability CVE-2026-0250 affects the Palo Alto Networks GlobalProtect app (not on iOS) and is caused by a buffer overflow in the processing of requests/responses exchanged between Portal and Gateway. This could allow a man-in-the-middle to disrupt system processes and potentially execute a...

7.7CVSS6.4AI score0.00007EPSS
Exploits0References1
CVE
CVE
added 2026/05/13 6:20 p.m.10 views

CVE-2026-0251

Technical details (root cause, affected versions, exploitability, and fixes) are not publicly available in the provided documents. Monitor for updates from vendors and CVE records.

8.5CVSS6.1AI score0.00007EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/13 6:20 p.m.4 views

CVE-2026-0251

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...

6.1AI score0.00007EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2026/05/13 6:20 p.m.25 views

CVE-2026-0251 GlobalProtect App: Local Privilege Escalation Vulnerabilities

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...

8.5CVSS0.00007EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/05/13 12:0 a.m.4 views

Palo Alto Networks GlobalProtect app 信任管理问题漏洞

The Palo Alto Networks GlobalProtect app is a network protection software developed by Palo Alto Networks. The GlobalProtect app has a trust management vulnerability caused by improper certificate verification. This vulnerability allows attackers to intercept encrypted communications and...

7.6CVSS5.8AI score0.00007EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/05/13 12:0 a.m.5 views

Palo Alto Networks GlobalProtect app 缓冲区错误漏洞

The Palo Alto Networks GlobalProtect app is a network protection software developed by Palo Alto Networks. The GlobalProtect app has a buffer error vulnerability, which stems from a buffer overflow issue. This vulnerability could allow attackers to interrupt system processes and execute arbitrary...

7.7CVSS6.5AI score0.00007EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-22059

Malware in sbrugna...

5.3CVSS5.5AI score0.00115EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-22032

Malware in sbrugna...

6.8CVSS6AI score0.00058EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-26390

Malware in sbrugna...

5.5CVSS5.5AI score0.00045EPSS
Exploits0References2
Rows per page
Query Builder