CVE-2026-0296

MEDIUM

CVE: CVE-2026-0296 - Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-t...Sign in to save

CVSS

4.5

CVSS v4.0

EPSS

N/A

Exploit Prediction Score

Published

August 13, 2026

Exploitability

No EPSS data available

Description

Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. VPN tunnel traffic is not impacted. The GlobalProtect app on iOS, Android, and Chrome OS is not affected.

Weaknesses

CWE-295

Affected Packages

No package data available.

Aliases

CVE-2026-0296

Related references

Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).

https://security.paloaltonetworks.com/CVE-2026-0296