🔐 CVE Alert

CVE-2026-0307

UNKNOWN 0.0

GlobalProtect App: Local Privilege Escalation Vulnerabilities

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges. This GlobalProtect app on iOS, Android and ChromeOS is not impacted.

CWE CWE-426
Vendor palo alto networks
Product globalprotect app
Published Sep 10, 2026
Last Updated Sep 11, 2026
Stay Ahead of the Next One

Get instant alerts for palo alto networks globalprotect app

Be the first to know when new unknown vulnerabilities affecting palo alto networks globalprotect app are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Palo Alto Networks / GlobalProtect App
6.3.0 < 6.3.3-h15 6.0.0 < 6.0.15
Palo Alto Networks / GlobalProtect App
6.3.0 < 6.3.3-h15 6.2.0 < 6.2.8-h14 6.0.0 < 6.0.15
Palo Alto Networks / GlobalProtect App
All

References

NVD ↗ CVE.org ↗ EPSS Data ↗
security.paloaltonetworks.com: https://security.paloaltonetworks.com/CVE-2026-0307

Credits

our internal security research teams