IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
1.3Baja

CVE-2026-0325PAN-OS: GlobalProtect Authorization Bypass Vulnerability

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access Publicada: (hace 3 días)

Descripción

An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated attacker with valid GlobalProtect credentials to bypass IP address restrictions and circumvent network access controls that rely on source IP filtering. Cloud NGFW is not affected by this vulnerability.

Debilidad (CWE): CWE-940

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
Palo Alto Networks Cloud NGFW fixed All
Palo Alto Networks PAN-OS 12.2.0 – < 12.2.4-h2, 12.1.0 – < 12.1.10-h4, 11.2.0 – < 11.2.16-h2, 11.1.0 – < 11.1.16-h5
Palo Alto Networks Prisma Access 12.1.0 – < 12.1.10-h4, 11.2.0

Referencias y parches

CVE recientes del mismo producto — Palo Alto PAN-OS / GlobalProtect

1.7Baja
CVE-2026-0326

PAN-OS: Buffer Overflow Vulnerability in Protocol and Service Processing

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access

A buffer overflow vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to disrupt service processing by causing a service process crash or memory corruption. Panorama and Prisma® Access are not affected by this vulnerability.

2.3Baja
CVE-2026-0327

PAN-OS: Privilege Escalation Vulnerability in GlobalProtect

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access

A privilege escalation vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated, lower-privileged user to obtain the privileges and configuration of a higher-privileged user. Cloud NGFW and Panorama are not…

2.7Baja
CVE-2026-0328

PAN-OS: User Impersonation through GlobalProtect Portal

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access

Authentication bypass vulnerabilities in the GlobalProtect™ portal and gateway of Palo Alto Networks PAN-OS® software enables an unauthenticated user to bypass security restrictions and establish an unauthorized VPN connection. Panorama, Cloud NGFW, and P…

4.6Media
CVE-2026-0329

PAN-OS: Buffer Overflow Vulnerability

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access

A buffer overflow vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Cl…

6.1Media
CVE-2026-0330

PAN-OS: Authenticated Remote Code Execution (RCE) in Panorama

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access

A remote code execution (RCE) vulnerability in Palo Alto Networks PAN-OS® software on Panorama enables an authenticated administrator with network access to execute arbitrary code with root privileges. The security risk posed by this issue is significantly…

6.6Media
CVE-2026-0331

PAN-OS: Sensitive Information Disclosure Vulnerability

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access

An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated remote attacker with network access to obtain sensitive firewall and session information by sending traffic to or through a dataplane interface. Pano…