Palo Alto Networks PAN-OS: Authentication bypass in GlobalProtect (CVE-2026-0328)
An authentication bypass vulnerability in the GlobalProtect portal and gateway of PAN-OS allows unauthenticated users to establish unauthorized VPN connections in specific configurations.
CVE search metadata
CVE search record: CVE-2026-0328. KEV: no. Product: PAN-OS. Brief: Palo Alto Networks PAN-OS: Authentication bypass in GlobalProtect (CVE-2026-0328). Brief link: https://feed.craftedsignal.io/briefs/2026-11-cve-2026-0328-pan-os/
Triage facts
Revision 1- Applicability
- PAN-OS
- Evidence
- Not observed
- Severity
- Low
- Sources
- 1 public source
- Freshness
- Revision 1Nov 11, 21:53 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
Palo Alto Networks has disclosed an authentication bypass vulnerability (CVE-2026-0328) affecting the GlobalProtect portal and gateway in PAN-OS software. The vulnerability allows an unauthenticated user to bypass security restrictions and establish an unauthorized VPN connection. This issue only impacts customers who enable the use of third-party VPN clients with the GlobalProtect Gateway or Portal.
Impact
Successful exploitation allows an unauthenticated attacker to bypass authentication mechanisms and establish an unauthorized VPN connection. Palo Alto Networks has confirmed that Panorama, Cloud NGFW, and Prisma Access are not affected.
Recommendation
- Apply the software updates provided by Palo Alto Networks to address this vulnerability.
- There are no known workarounds for this issue.