Riskcovery

CVE-2026-0249

GlobalProtect App: Certificate Validation Bypass Vulnerabilities

State
Published
Severity
4.9 Medium
Published
May 13, 2026
Updated
May 15, 2026
Reserved
Nov 3, 2025

Read the record on cve.org

Description

Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacker to intercept encrypted communications and potentially compromise the endpoint. This can enable a local non-administrative operating system user or an attacker on the same subnet to redirect traffic to an unauthorized server and facilitate the installation of malicious software.

The GlobalProtect app on Linux, Windows, iOS and GlobalProtect UWP app are not affected.

Scores

CVSSScoreVectorSource
4.04.9 MediumCVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amberpalo_alto

Weaknesses

  • CWE-295 Improper Certificate Validation

Affected Products

ProductVersions
GlobalProtect AppPalo Alto Networks
  • 6.3.0 to before 6.3.3-h9 (6.3.3-999)Affectedfrom 6.3.3-h9 (6.3.3-999)Not affected
  • 6.2.0 to before 6.2.8-h10 (6.2.8-948)Affectedfrom 6.2.8-h10 (6.2.8-948)Not affected
GlobalProtect AppPalo Alto Networks
  • 6.1.0 to before 6.1.13Affectedfrom 6.1.13Not affected
  • 6.0.0 to before 6.0.14Affectedfrom 6.0.14Not affected
GlobalProtect AppPalo Alto Networks
  • 6.0.0 to before 6.0.13Affectedfrom 6.0.13Not affected
GlobalProtect AppPalo Alto Networks
  • AllNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.