637 lines
40 KiB
JSON
637 lines
40 KiB
JSON
{
|
|
"dataType": "CVE_RECORD",
|
|
"dataVersion": "5.2",
|
|
"cveMetadata": {
|
|
"cveId": "CVE-2026-0296",
|
|
"assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
|
|
"state": "PUBLISHED",
|
|
"assignerShortName": "palo_alto",
|
|
"dateReserved": "2025-11-03T20:44:53.961Z",
|
|
"datePublished": "2026-08-13T01:59:45.972Z",
|
|
"dateUpdated": "2026-08-13T13:29:46.735Z"
|
|
},
|
|
"containers": {
|
|
"cna": {
|
|
"providerMetadata": {
|
|
"orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
|
|
"shortName": "palo_alto",
|
|
"dateUpdated": "2026-08-13T01:59:45.972Z"
|
|
},
|
|
"title": "GlobalProtect App: Improper Certificate Validation Bypass Vulnerability",
|
|
"datePublic": "2026-08-12T16:00:00.000Z",
|
|
"problemTypes": [
|
|
{
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"cweId": "CWE-295",
|
|
"description": "CWE-295 Improper Certificate Validation",
|
|
"type": "CWE"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"impacts": [
|
|
{
|
|
"capecId": "CAPEC-94",
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CAPEC-94 Man in the Middle Attack"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"affected": [
|
|
{
|
|
"vendor": "Palo Alto Networks",
|
|
"product": "GlobalProtect App",
|
|
"platforms": [
|
|
"Linux"
|
|
],
|
|
"versions": [
|
|
{
|
|
"status": "affected",
|
|
"version": "6.3.0",
|
|
"lessThan": "6.3.3-h15",
|
|
"changes": [
|
|
{
|
|
"at": "6.3.3-h15",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "6.2.0",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "6.0.0",
|
|
"lessThan": "6.0.15",
|
|
"changes": [
|
|
{
|
|
"at": "6.0.15",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"versionType": "custom"
|
|
}
|
|
],
|
|
"defaultStatus": "unaffected",
|
|
"cpes": [
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Linux:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Linux:*:*"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Palo Alto Networks",
|
|
"product": "GlobalProtect App",
|
|
"platforms": [
|
|
"macOS",
|
|
"Windows"
|
|
],
|
|
"versions": [
|
|
{
|
|
"status": "affected",
|
|
"version": "6.3.0",
|
|
"lessThan": "6.3.3-h14",
|
|
"changes": [
|
|
{
|
|
"at": "6.3.3-h14",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "6.2.0",
|
|
"lessThan": "6.2.8-h13",
|
|
"changes": [
|
|
{
|
|
"at": "6.2.8-h13",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"status": "affected",
|
|
"version": "6.0.0",
|
|
"lessThan": "6.0.15",
|
|
"changes": [
|
|
{
|
|
"at": "6.0.15",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"versionType": "custom"
|
|
}
|
|
],
|
|
"defaultStatus": "unaffected",
|
|
"cpes": [
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:macOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*"
|
|
]
|
|
},
|
|
{
|
|
"vendor": "Palo Alto Networks",
|
|
"product": "GlobalProtect App",
|
|
"platforms": [
|
|
"iOS",
|
|
"Android",
|
|
"Chrome OS"
|
|
],
|
|
"versions": [
|
|
{
|
|
"status": "unaffected",
|
|
"version": "All",
|
|
"versionType": "custom"
|
|
}
|
|
],
|
|
"defaultStatus": "unaffected",
|
|
"cpes": [
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:iOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Android:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Chrome_OS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:iOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Android:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Chrome_OS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:iOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Android:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Chrome_OS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:iOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Android:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Chrome_OS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:iOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Android:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Chrome_OS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:iOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Android:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Chrome_OS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:iOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Android:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Chrome_OS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:iOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Android:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Chrome_OS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:iOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Android:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Chrome_OS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:iOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Android:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Chrome_OS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:iOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Android:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Chrome_OS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:iOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Android:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Chrome_OS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:iOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Android:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Chrome_OS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:iOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Android:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Chrome_OS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:iOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Android:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Chrome_OS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:iOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Android:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Chrome_OS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:iOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Android:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Chrome_OS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:iOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Android:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Chrome_OS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:iOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Android:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Chrome_OS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:iOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Android:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Chrome_OS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:iOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Android:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Chrome_OS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:iOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Android:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Chrome_OS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:iOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Android:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Chrome_OS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:iOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Android:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Chrome_OS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:iOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Android:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Chrome_OS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:iOS:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Android:*:*",
|
|
"cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Chrome_OS:*:*"
|
|
]
|
|
}
|
|
],
|
|
"cpeApplicability": [
|
|
{
|
|
"operator": "OR",
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
|
|
"versionStartIncluding": "6.3.0",
|
|
"versionEndExcluding": "6.3.3-h15"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:linux:*:*:*:*:*"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
|
|
"versionStartIncluding": "6.0.0",
|
|
"versionEndExcluding": "6.0.15"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
|
|
"versionStartIncluding": "6.3.0",
|
|
"versionEndExcluding": "6.3.3-h14"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
|
|
"versionStartIncluding": "6.3.0",
|
|
"versionEndExcluding": "6.3.3-h14"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
|
|
"versionStartIncluding": "6.2.0",
|
|
"versionEndExcluding": "6.2.8-h13"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
|
|
"versionStartIncluding": "6.2.0",
|
|
"versionEndExcluding": "6.2.8-h13"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
|
|
"versionStartIncluding": "6.0.0",
|
|
"versionEndExcluding": "6.0.15"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
|
|
"versionStartIncluding": "6.0.0",
|
|
"versionEndExcluding": "6.0.15"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:ios:*:*:*:*:*"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:android:*:*:*:*:*"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:chrome_os:*:*:*:*:*"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. VPN tunnel traffic is not impacted.\n\nThe GlobalProtect app on iOS, Android, and Chrome OS is not affected.",
|
|
"supportingMedia": [
|
|
{
|
|
"type": "text/html",
|
|
"base64": false,
|
|
"value": "<p></p><span>Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. VPN tunnel traffic is not impacted.</span><b><span><br></span><span><br></span></b><span>The GlobalProtect app on iOS, Android, and Chrome OS is not affected.</span><p></p>"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "https://security.paloaltonetworks.com/CVE-2026-0296",
|
|
"tags": [
|
|
"vendor-advisory"
|
|
]
|
|
}
|
|
],
|
|
"metrics": [
|
|
{
|
|
"format": "CVSS",
|
|
"scenarios": [
|
|
{
|
|
"lang": "en",
|
|
"value": "GENERAL"
|
|
}
|
|
],
|
|
"cvssV4_0": {
|
|
"attackVector": "ADJACENT",
|
|
"attackComplexity": "LOW",
|
|
"attackRequirements": "PRESENT",
|
|
"privilegesRequired": "NONE",
|
|
"userInteraction": "PASSIVE",
|
|
"vulnConfidentialityImpact": "HIGH",
|
|
"subConfidentialityImpact": "NONE",
|
|
"vulnIntegrityImpact": "HIGH",
|
|
"subIntegrityImpact": "NONE",
|
|
"vulnAvailabilityImpact": "NONE",
|
|
"subAvailabilityImpact": "NONE",
|
|
"exploitMaturity": "UNREPORTED",
|
|
"Safety": "NOT_DEFINED",
|
|
"Automatable": "NO",
|
|
"Recovery": "USER",
|
|
"valueDensity": "DIFFUSE",
|
|
"vulnerabilityResponseEffort": "MODERATE",
|
|
"providerUrgency": "AMBER",
|
|
"version": "4.0",
|
|
"baseSeverity": "MEDIUM",
|
|
"baseScore": 4.5,
|
|
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber"
|
|
}
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "No special configuration is required to be affected by this issue.",
|
|
"supportingMedia": [
|
|
{
|
|
"type": "text/html",
|
|
"base64": false,
|
|
"value": "No special configuration is required to be affected by this issue."
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"workarounds": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "No known workarounds or mitigations exist for this issue.",
|
|
"supportingMedia": [
|
|
{
|
|
"type": "text/html",
|
|
"base64": false,
|
|
"value": "No known workarounds or mitigations exist for this issue."
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"solutions": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "VERSION MINOR VERSION SUGGESTED SOLUTION\nGlobalProtect App 6.3/6.2 on Linux 6.2.0 through 6.3.3-h14 Upgrade to 6.3.3-h15 or later.\nGlobalProtect App 6.0 on Linux 6.0.0 through 6.0.14 Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3 on macOS 6.3.0 through 6.3.3-h13 Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on macOS 6.2.0 through 6.2.8-h12 Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.0 on macOS 6.0.0 through 6.0.14 Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3 on Windows 6.3.0 through 6.3.3-h13 Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on Windows 6.2.0 through 6.2.8-h12 Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.0 on Windows 6.0.0 through 6.0.14 Upgrade to 6.0.15 or later.\nGlobalProtect App on iOS No action needed.\nGlobalProtect App on Android No action needed.\nGlobalProtect App on Chrome OS No action needed.",
|
|
"supportingMedia": [
|
|
{
|
|
"type": "text/html",
|
|
"base64": false,
|
|
"value": "<table class=\"tbl\">\n <thead>\n <tr>\n <th>Version</th>\n <th>Minor Version</th>\n <th>Suggested Solution</th>\n </tr>\n </thead>\n <tbody>\n <tr>\n <td>GlobalProtect App 6.3/6.2 on Linux</td>\n <td>6.2.0 through 6.3.3-h14</td>\n <td>Upgrade to 6.3.3-h15 or later.</td>\n </tr>\n <tr>\n <td>GlobalProtect App 6.0 on Linux</td>\n <td>6.0.0 through 6.0.14</td>\n <td>Upgrade to 6.0.15 or later.</td>\n </tr>\n <tr>\n <td>GlobalProtect App 6.3 on macOS</td>\n <td>6.3.0 through 6.3.3-h13</td>\n <td>Upgrade to 6.3.3-h14 (6.3.3-1121) or later.</td>\n </tr>\n <tr>\n <td>GlobalProtect App 6.2 on macOS</td>\n <td>6.2.0 through 6.2.8-h12</td>\n <td>Upgrade to 6.2.8-h13 (6.2.8-1045) or later.</td>\n </tr>\n <tr>\n <td>GlobalProtect App 6.0 on macOS</td>\n <td>6.0.0 through 6.0.14</td>\n <td>Upgrade to 6.0.15 or later.</td>\n </tr>\n <tr>\n <td>GlobalProtect App 6.3 on Windows</td>\n <td>6.3.0 through 6.3.3-h13</td>\n <td>Upgrade to 6.3.3-h14 (6.3.3-1121) or later.</td>\n </tr>\n <tr>\n <td>GlobalProtect App 6.2 on Windows</td>\n <td>6.2.0 through 6.2.8-h12</td>\n <td>Upgrade to 6.2.8-h13 (6.2.8-1045) or later.</td>\n </tr>\n <tr>\n <td>GlobalProtect App 6.0 on Windows</td>\n <td>6.0.0 through 6.0.14</td>\n <td>Upgrade to 6.0.15 or later.</td>\n </tr>\n <tr>\n <td>GlobalProtect App on iOS</td>\n <td></td>\n <td>No action needed.</td>\n </tr>\n <tr>\n <td>GlobalProtect App on Android</td>\n <td></td>\n <td>No action needed.</td>\n </tr>\n <tr>\n <td>GlobalProtect App on Chrome OS</td>\n <td></td>\n <td>No action needed.</td>\n </tr>\n </tbody>\n</table>"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"exploits": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue.",
|
|
"supportingMedia": [
|
|
{
|
|
"type": "text/html",
|
|
"base64": false,
|
|
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"timeline": [
|
|
{
|
|
"time": "2026-08-12T16:00:00.000Z",
|
|
"lang": "en",
|
|
"value": "Initial Publication."
|
|
}
|
|
],
|
|
"credits": [
|
|
{
|
|
"lang": "en",
|
|
"value": "our internal security research teams",
|
|
"type": "finder"
|
|
}
|
|
],
|
|
"source": {
|
|
"discovery": "INTERNAL"
|
|
},
|
|
"x_generator": {
|
|
"engine": "Vulnogram 0.1.0-dev"
|
|
},
|
|
"x_affectedList": [
|
|
"GlobalProtect App 6.3.3",
|
|
"GlobalProtect App 6.3.2",
|
|
"GlobalProtect App 6.3.1",
|
|
"GlobalProtect App 6.3.0",
|
|
"GlobalProtect App 6.3",
|
|
"GlobalProtect App 6.2.9",
|
|
"GlobalProtect App 6.2.8-c982",
|
|
"GlobalProtect App 6.2.8-c948",
|
|
"GlobalProtect App 6.2.8-c910",
|
|
"GlobalProtect App 6.2.8-c471",
|
|
"GlobalProtect App 6.2.8-c431",
|
|
"GlobalProtect App 6.2.8-c416",
|
|
"GlobalProtect App 6.2.8-c317",
|
|
"GlobalProtect App 6.2.8-c263",
|
|
"GlobalProtect App 6.2.8-c243",
|
|
"GlobalProtect App 6.2.8",
|
|
"GlobalProtect App 6.2.7",
|
|
"GlobalProtect App 6.2.6",
|
|
"GlobalProtect App 6.2.4",
|
|
"GlobalProtect App 6.2.3",
|
|
"GlobalProtect App 6.2.2",
|
|
"GlobalProtect App 6.2.1",
|
|
"GlobalProtect App 6.2.0",
|
|
"GlobalProtect App 6.2",
|
|
"GlobalProtect App 6.0.14",
|
|
"GlobalProtect App 6.0.13",
|
|
"GlobalProtect App 6.0.12",
|
|
"GlobalProtect App 6.0.11",
|
|
"GlobalProtect App 6.0.10",
|
|
"GlobalProtect App 6.0.8",
|
|
"GlobalProtect App 6.0.7",
|
|
"GlobalProtect App 6.0.6",
|
|
"GlobalProtect App 6.0.5",
|
|
"GlobalProtect App 6.0.4",
|
|
"GlobalProtect App 6.0.3",
|
|
"GlobalProtect App 6.0.2",
|
|
"GlobalProtect App 6.0.1",
|
|
"GlobalProtect App 6.0.0",
|
|
"GlobalProtect App 6.0"
|
|
],
|
|
"x_cpeGeneratedAt": "2026-08-12T02:10:58.092Z"
|
|
},
|
|
"adp": [
|
|
{
|
|
"metrics": [
|
|
{
|
|
"other": {
|
|
"type": "ssvc",
|
|
"content": {
|
|
"timestamp": "2026-08-13T13:29:34.520951Z",
|
|
"id": "CVE-2026-0296",
|
|
"options": [
|
|
{
|
|
"Exploitation": "none"
|
|
},
|
|
{
|
|
"Automatable": "no"
|
|
},
|
|
{
|
|
"Technical Impact": "total"
|
|
}
|
|
],
|
|
"role": "CISA Coordinator",
|
|
"version": "2.0.3"
|
|
}
|
|
}
|
|
}
|
|
],
|
|
"title": "CISA ADP Vulnrichment",
|
|
"providerMetadata": {
|
|
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
|
"shortName": "CISA-ADP",
|
|
"dateUpdated": "2026-08-13T13:29:46.735Z"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
} |