Skip to content
Threat Feed
Subscribe

Product

GlobalProtect App 6.0

2 briefs RSS
medium threat

GlobalProtect App Improper Certificate Validation Bypass

An improper certificate validation vulnerability (CVE-2026-0296) in the Palo Alto Networks GlobalProtect app allows unauthenticated, man-in-the-middle attackers to intercept and modify application communications on Windows, macOS, and Linux.

exploited GlobalProtect App 6.0 +2 vpn mitm cve-2026-0296
1t
medium threat

Local Privilege Escalation in Palo Alto Networks GlobalProtect

A local privilege escalation vulnerability (CVE-2026-0299) in the Palo Alto Networks GlobalProtect app allows authenticated local users to escalate to SYSTEM or root privileges via untrusted search path exploitation.

exploited GlobalProtect App 6.3 +3 privilege-escalation vulnerability endpoint-security
2t