Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Palo Alto Networks GlobalProtect App, GlobalProtect App 6.0.13, 6.2.8-h10 (6.2.8-948), 6.3.3-h9 (6.3.3-999) Clear all filters
TI-2026-00193 CVE-2026-0249 · GHSA-h3p8-5g8q-vm3h

GlobalProtect App: Certificate Validation Bypass Vulnerabilities

Priority LOW 23

Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacker to intercept encrypted communications and potentially compromise the endpoint.

CVSS 4.0MEDIUM 4.9 Adjacent network No auth No interaction EPSS 0.00111 Published 2026-05-13 Fixed in 6.3.3-h9 (6.3.3-999), 6.2.8-h10 (6.2.8-948) +4 CWE-295
TI-2026-00194 CVE-2026-0250 · GHSA-mv4m-c9mp-36jr

GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway

Priority LOW 26

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges.

CVSS 4.0MEDIUM 5.2 Adjacent network No auth No interaction EPSS 0.00392 Published 2026-05-13 Fixed in 6.3.3-h9 (6.3.3-999), 6.2.8-h10 (6.2.8-948) +7 CWE-787