Cpe:2.3:o:palo_alto_networks:pan-Os:11.1.16:h4:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3opalo_alto_networkspan-os11.1.16h4/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 11 Nov 2026 21:53:39 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgPalo Alto Networks PAN-OS: GlobalProtect Privilege Escalation (CVE-2026-0327)https://feed.craftedsignal.io/briefs/2026-11-pan-os-globalprotect-priv-esc-cve-2026-0327/Wed, 11 Nov 2026 21:53:39 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-pan-os-globalprotect-priv-esc-cve-2026-0327/A privilege escalation vulnerability in the GlobalProtect gateway of PAN-OS allows an authenticated, lower-privileged user to gain higher-privileged access when using RADIUS-based authentication challenges (CVE-2026-0327).A privilege escalation vulnerability exists in the GlobalProtect gateway of Palo Alto Networks PAN-OS software. The issue allows an authenticated, lower-privileged user to obtain the privileges and configuration of a higher-privileged user. This vulnerability specifically affects firewalls with a GlobalProtect gateway configured to use an authentication profile that utilizes a RADIUS provider and issues a supported authentication challenge. Palo Alto Networks is not aware of any malicious exploitation of this issue. Cloud NGFW and Panorama are not affected.

Impact

Successful exploitation allows an authenticated user to gain elevated privileges and access sensitive configuration data, potentially leading to unauthorized administrative control within the context of the GlobalProtect gateway.

Recommendation

  • Apply the vendor-provided patches for PAN-OS and Prisma Access immediately.
  • If patching is not immediately feasible, change the GlobalProtect authentication profile to a non-challenge based method such as SAML, or enforce client certificate authentication using a Certificate Profile to mitigate the vulnerability.
]]>lowadvisoryvulnerabilityprivilege-escalationnetwork-security