CVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability

🗓️ 13 Aug 2026 01:59:45Reported by palo_altoType

Improper certificate validation in GlobalProtect app allows unauthenticated MitM attackers to intercept and modify application communications.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2026-0296	13 Aug 202601:59	–	attackerkb
BDU FSTEC	The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to errors in the certificate validation process. This allows attackers to carry out “man-in-the-middle” attacks.	7 Sep 202600:00	–	bdu_fstec
Circl	CVE-2026-0296	12 Aug 202619:03	–	circl
CVE	CVE-2026-0296	13 Aug 202601:59	–	cve
Cvelist	CVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability	13 Aug 202601:59	–	cvelist
EUVD	EUVD-2026-57710	13 Aug 202601:59	–	euvd
NVD	CVE-2026-0296	13 Aug 202603:16	–	nvd
Palo Alto Networks	GlobalProtect App: Improper Certificate Validation Bypass Vulnerability	12 Aug 202616:00	–	paloalto
Tenable Nessus	Palo Alto GlobalProtect App MacOS 6.0.x < 6.0.15 / 6.2.x < 6.2.8-h13 / 6.3.x < 6.3.3-h14 Multiple Vulnerabilities (Global Un-Protect)	1 Sep 202600:00	–	nessus
Tenable Nessus	Palo Alto GlobalProtect App 6.0.x < 6.0.15 / 6.2.x < 6.2.8-h13 / 6.3.x < 6.3.3-h14 Multiple Vulnerabilities (Global Un-Protect)	1 Sep 202600:00	–	nessus