Improper Input Handling Vulnerability in GlobalProtect Gateway by Palo Alto Networks
CVE-2026-0319

4.9MEDIUM

Key Information:

Vendor

Palo Alto Networks
Status
Cloud Ngfw
Pan-os
Prisma Access
Vendor
CVE Published:
14 October 2026

Badges

đź‘ľ Exploit Exists

What is CVE-2026-0319?

An improper input handling vulnerability exists in the GlobalProtect™ gateway of Palo Alto Networks' PAN-OS software, allowing an authenticated user to leverage another user's identity to establish a GlobalProtect session. This issue does not affect Cloud NGFW or Panorama products. It is essential for users to ensure their systems are updated to mitigate potential risks associated with this vulnerability.

Affected Version(s)

PAN-OS 12.2.0 < 12.2.4

PAN-OS 12.1.0 < 12.1.10-h2

PAN-OS 11.2.0 < 11.2.16

References

https://security.paloaltonetworks.com/CVE-2026-0319
vendor-advisory

CVSS V4

Score:
4.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • đź‘ľ

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ben Nott (internal reporter)
.