{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3opalo_alto_networkspan-os11.1.16h4/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:o:palo_alto_networks:pan-os:12.2.4:*:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:12.1.10:h3:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.2.16:h1:*:*:*:*:*:*","cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h4:*:*:*:*:*:*"],"_cs_cves":[{"id":"CVE-2026-0327"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["PAN-OS (\u003c 12.2.4-h2)","PAN-OS (\u003c 12.1.10-h4)","PAN-OS (\u003c 11.2.16-h2)","PAN-OS (\u003c 11.1.16-h5)","Prisma Access (\u003c 12.1.10-h4)"],"_cs_severities":["low"],"_cs_tags":["vulnerability","privilege-escalation","network-security"],"_cs_type":"advisory","_cs_vendors":["Palo Alto Networks"],"content_html":"\u003cp\u003eA privilege escalation vulnerability exists in the GlobalProtect gateway of Palo Alto Networks PAN-OS software. The issue allows an authenticated, lower-privileged user to obtain the privileges and configuration of a higher-privileged user. This vulnerability specifically affects firewalls with a GlobalProtect gateway configured to use an authentication profile that utilizes a RADIUS provider and issues a supported authentication challenge. Palo Alto Networks is not aware of any malicious exploitation of this issue. Cloud NGFW and Panorama are not affected.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an authenticated user to gain elevated privileges and access sensitive configuration data, potentially leading to unauthorized administrative control within the context of the GlobalProtect gateway.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eApply the vendor-provided patches for PAN-OS and Prisma Access immediately.\u003c/li\u003e\n\u003cli\u003eIf patching is not immediately feasible, change the GlobalProtect authentication profile to a non-challenge based method such as SAML, or enforce client certificate authentication using a Certificate Profile to mitigate the vulnerability.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-11T21:53:39Z","date_published":"2026-11-11T21:53:39Z","id":"https://feed.craftedsignal.io/briefs/2026-11-pan-os-globalprotect-priv-esc-cve-2026-0327/","summary":"A privilege escalation vulnerability in the GlobalProtect gateway of PAN-OS allows an authenticated, lower-privileged user to gain higher-privileged access when using RADIUS-based authentication challenges (CVE-2026-0327).","title":"Palo Alto Networks PAN-OS: GlobalProtect Privilege Escalation (CVE-2026-0327)","url":"https://feed.craftedsignal.io/briefs/2026-11-pan-os-globalprotect-priv-esc-cve-2026-0327/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:o:palo_alto_networks:pan-Os:11.1.16:h4:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}