{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3apalo_alto_networkspan_os/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:palo_alto_networks:pan_os:*:*:*:*:*:*:*:*"],"_cs_cves":[{"id":"CVE-2026-0328"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["PAN-OS"],"_cs_severities":["low"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Palo Alto Networks"],"content_html":"\u003cp\u003ePalo Alto Networks has disclosed an authentication bypass vulnerability (CVE-2026-0328) affecting the GlobalProtect portal and gateway in PAN-OS software. The vulnerability allows an unauthenticated user to bypass security restrictions and establish an unauthorized VPN connection. This issue only impacts customers who enable the use of third-party VPN clients with the GlobalProtect Gateway or Portal.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an unauthenticated attacker to bypass authentication mechanisms and establish an unauthorized VPN connection. Palo Alto Networks has confirmed that Panorama, Cloud NGFW, and Prisma Access are not affected.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eApply the software updates provided by Palo Alto Networks to address this vulnerability.\u003c/li\u003e\n\u003cli\u003eThere are no known workarounds for this issue.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-11T21:53:10Z","date_published":"2026-11-11T21:53:10Z","id":"https://feed.craftedsignal.io/briefs/2026-11-cve-2026-0328-pan-os/","summary":"An authentication bypass vulnerability in the GlobalProtect portal and gateway of PAN-OS allows unauthenticated users to establish unauthorized VPN connections in specific configurations.","title":"Palo Alto Networks PAN-OS: Authentication bypass in GlobalProtect (CVE-2026-0328)","url":"https://feed.craftedsignal.io/briefs/2026-11-cve-2026-0328-pan-os/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:palo_alto_networks:pan_os:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}