An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user. Cloud NGFW and Panorama are not affected by this vulnerability.
Fix
Vendor advisories in the News 1
- CVE-2026-0319 PAN-OS: Improper Input Handling Vulnerability (Severity: MEDIUM) Palo Alto Networks Security Advisories · 2026-10-14
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 2
- StatusReceived → Awaiting AnalysisNVD modified 2026-10-15 16:26
- First seenCVSS 4.9NVD modified 2026-10-14 21:17
Affected (CPE criteria) 0
NVD has not attached CPE configurations yet.