CVE-2026-0319
PAN-OS: Improper Input Handling Vulnerability
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user. Cloud NGFW and Panorama are not affected by this vulnerability.
| CWE | CWE-754 |
| Vendor | palo alto networks |
| Product | cloud ngfw |
| Published | Oct 14, 2026 |
Stay Ahead of the Next One
Get instant alerts for palo alto networks cloud ngfw
Be the first to know when new unknown vulnerabilities affecting palo alto networks cloud ngfw are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Palo Alto Networks / Cloud NGFW
All versions affected Palo Alto Networks / PAN-OS
12.2.0 < 12.2.4 12.1.0 < 12.1.10-h2 11.2.0 < 11.2.16 11.1.0 < 11.1.16-h3 10.2.0 < 10.2.18-h12
Palo Alto Networks / Prisma Access
12.1.0 < 12.1.7-h8 11.2.0 < 11.2.7-h21 10.2.0 < 10.2.10-h41
References
Credits
Ben Nott (internal reporter)