CVE-2026-0298

published 2026-08-13

CVE-2026-0298: An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect™ app on…

Priority P4 28 medium 5.2 CVSS 4.0

AV A AC L AT P PR N UI N VC H VI H VA H SC L SI N SA N E U CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU N R U V D RE M U Amber

An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on an affected client.

The GlobalProtect app on Linux, macOS, iOS, Android, and Chrome OS is not affected.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
palo_alto_networks	globalprotect_app	>= 6.0.0 < 6.0.15	6.0.15
palo_alto_networks	globalprotect_app	>= 6.2.0 < 6.2.8-h13	6.2.8-h13
palo_alto_networks	globalprotect_app	>= 6.3.0 < 6.3.3-h14	6.3.3-h14
paloalto	globalprotect_app	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-94