CVE-2026-0296

published 2026-08-13

CVE-2026-0296: Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle (MitM)…

Priority P4 19 medium 4.5 CVSS 4.0

AV A AC L AT P PR N UI P VC H VI H VA N SC N SI N SA N E U CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU N R U V D RE M U Amber

Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. VPN tunnel traffic is not impacted.

The GlobalProtect app on iOS, Android, and Chrome OS is not affected.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
palo_alto_networks	globalprotect_app	—	—
palo_alto_networks	globalprotect_app	>= 6.0.0 < 6.0.15	6.0.15
palo_alto_networks	globalprotect_app	>= 6.2.0 < 6.2.8-h13	6.2.8-h13
palo_alto_networks	globalprotect_app	>= 6.3.0 < 6.3.3-h15	6.3.3-h15
palo_alto_networks	globalprotect_app	>= 6.3.0 < 6.3.3-h14	6.3.3-h14
paloalto	globalprotect_app	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-295