Cpe:2.3:a:palo_alto_networks:pan_os:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3apalo_alto_networkspan_os/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 11 Nov 2026 21:53:10 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgPalo Alto Networks PAN-OS: Authentication bypass in GlobalProtect (CVE-2026-0328)https://feed.craftedsignal.io/briefs/2026-11-cve-2026-0328-pan-os/Wed, 11 Nov 2026 21:53:10 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-cve-2026-0328-pan-os/An authentication bypass vulnerability in the GlobalProtect portal and gateway of PAN-OS allows unauthenticated users to establish unauthorized VPN connections in specific configurations.Palo Alto Networks has disclosed an authentication bypass vulnerability (CVE-2026-0328) affecting the GlobalProtect portal and gateway in PAN-OS software. The vulnerability allows an unauthenticated user to bypass security restrictions and establish an unauthorized VPN connection. This issue only impacts customers who enable the use of third-party VPN clients with the GlobalProtect Gateway or Portal.

Impact

Successful exploitation allows an unauthenticated attacker to bypass authentication mechanisms and establish an unauthorized VPN connection. Palo Alto Networks has confirmed that Panorama, Cloud NGFW, and Prisma Access are not affected.

Recommendation

  • Apply the software updates provided by Palo Alto Networks to address this vulnerability.
  • There are no known workarounds for this issue.
]]>lowadvisory