IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key
2.3Low

CVE-2026-0327PAN-OS: Privilege Escalation Vulnerability in GlobalProtect

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access Published: (3 days ago)

Description

A privilege escalation vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated, lower-privileged user to obtain the privileges and configuration of a higher-privileged user. Cloud NGFW and Panorama are not affected by this vulnerability.

Weakness (CWE): CWE-426

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
Palo Alto Networks Cloud NGFW fixed All
Palo Alto Networks PAN-OS 12.2.0 – < 12.2.4-h2, 12.1.0 – < 12.1.10-h4, 11.2.0 – < 11.2.16-h2, 11.1.0 – < 11.1.16-h5
Palo Alto Networks Prisma Access 12.1.0 – < 12.1.10-h4, 11.2.0

References and patches

Recent CVEs in the same product — Palo Alto PAN-OS / GlobalProtect

1.3Low
CVE-2026-0325

PAN-OS: GlobalProtect Authorization Bypass Vulnerability

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access

An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated attacker with valid GlobalProtect credentials to bypass IP address restrictions and circumvent network access controls that rely…

1.7Low
CVE-2026-0326

PAN-OS: Buffer Overflow Vulnerability in Protocol and Service Processing

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access

A buffer overflow vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to disrupt service processing by causing a service process crash or memory corruption. Panorama and Prisma® Access are not affected by this vulnerability.

2.7Low
CVE-2026-0328

PAN-OS: User Impersonation through GlobalProtect Portal

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access

Authentication bypass vulnerabilities in the GlobalProtect™ portal and gateway of Palo Alto Networks PAN-OS® software enables an unauthenticated user to bypass security restrictions and establish an unauthorized VPN connection. Panorama, Cloud NGFW, and P…

4.6Medium
CVE-2026-0329

PAN-OS: Buffer Overflow Vulnerability

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access

A buffer overflow vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Cl…

6.1Medium
CVE-2026-0330

PAN-OS: Authenticated Remote Code Execution (RCE) in Panorama

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access

A remote code execution (RCE) vulnerability in Palo Alto Networks PAN-OS® software on Panorama enables an authenticated administrator with network access to execute arbitrary code with root privileges. The security risk posed by this issue is significantly…

6.6Medium
CVE-2026-0331

PAN-OS: Sensitive Information Disclosure Vulnerability

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access

An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated remote attacker with network access to obtain sensitive firewall and session information by sending traffic to or through a dataplane interface. Pano…