CVE-2026-0299

Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...

EUVD-2026-57713

Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...

CVE-2026-0298 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)

An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider PLAP component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle MitM attacker to execute arbitrary code with SYSTEM privileges on an affected client. The...

CVE-2026-0297 GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man-in-the-middle MitM attacker or a rogue gateway to disrupt system processes and potentially execute arbitrary code with elevated privileges SYSTEM privileges on Windows, and root privileges on...

CVE-2026-0296

CVE-2026-0296 concerns Palo Alto Networks GlobalProtect, with an improper certificate validation vulnerability that enables an unauthenticated attacker to perform MitM on application communications. The issue is described as affecting the GlobalProtect app generally, with the note that iOS, Andro...

CVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability

Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle MitM access to intercept and modify application communications. VPN tunnel traffic is not impacted. The GlobalProtect app on iOS, Android, and Chrome ...

CVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability

Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle MitM access to intercept and modify application communications. VPN tunnel traffic is not impacted. The GlobalProtect app on iOS, Android, and Chrome ...

CVE-2026-0294

A privilege escalation PE vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS devices enables a local user to execute code with elevated privileges. The Prisma Access Agent on Linux, iOS, Android, and ChromeOS is not affected...

CVE-2026-0294 Prisma Access Agent: Local Privilege Escalation

A privilege escalation PE vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS devices enables a local user to execute code with elevated privileges. The Prisma Access Agent on Linux, iOS, Android, and ChromeOS is not affected...

CVE-2026-0291

CVE-2026-0291 affects Palo Alto Networks Prisma Access Agent on Linux. It is an improper link resolution before file access vulnerability that enables a local, low-privilege user to delete system files in a limited scope and disable the Prisma Access Agent. Affected: Linux; not affected on macOS,...

CVE-2026-0290

CVE-2026-0290 is an information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma Browser . A local attacker with low privileges can view sensitive data exposed by the feature. The NVD assigns a CVSS 3.1 score of 5.5 (Medium) , while Palo Alto Networks' own C...

CVE-2026-0294: Uncontrolled Search Path Element

A privilege escalation PE vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS devices enables a local user to execute code with elevated privileges. The Prisma Access Agent on Linux, iOS, Android, and ChromeOS is not affected...

CVE-2026-0297: Out-of-bounds Write

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man-in-the-middle MitM attacker or a rogue gateway to disrupt system processes and potentially execute arbitrary code with elevated privileges SYSTEM privileges on Windows, and root privileges on...

CVE-2026-0295: Concurrent Execution using Shared Resource with Improper Synchronization

A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root. The GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected...

CVE-2026-0292: Authentication Bypass by Spoofing

An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® Access Agent on Windows enables a local administrator to bypass security inspection, subsequently allowing them to inject and intercept arbitrary network traffic. The Prisma Access Agent on Linux, macOS, iO...

CVE-2026-0293: Protection Mechanism Failure

A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator privileges to bypass the anti-tamper protection, enabling unauthorized access to protected processes and files. The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is...

CVE-2026-16455: Improper Neutralization of CRLF Sequences

In Teltonika Networks RUTOS devices running versions 7.07.1 through 7.24.1 and TSWOS devices running versions 1.03 through 1.10, a vulnerability exists whereby a lower privileged user can escalate privileges to administrative level due to unsafe calls to an execl function...

CVE-2026-0299: Untrusted Search Path

Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...

CVE-2026-0298: Improper Control of Generation of Code

An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider PLAP component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle MitM attacker to execute arbitrary code with SYSTEM privileges on an affected client. The...

CVE-2026-0296: Improper Certificate Validation

Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle MitM access to intercept and modify application communications. VPN tunnel traffic is not impacted. The GlobalProtect app on iOS, Android, and Chrome ...