CVE-2026-0325
PAN-OS: GlobalProtect Authorization Bypass Vulnerability
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated attacker with valid GlobalProtect credentials to bypass IP address restrictions and circumvent network access controls that rely on source IP filtering. Cloud NGFW is not affected by this vulnerability.
| CWE | CWE-940 |
| Vendor | palo alto networks |
| Product | cloud ngfw |
| Published | Nov 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for palo alto networks cloud ngfw
Be the first to know when new unknown vulnerabilities affecting palo alto networks cloud ngfw are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Palo Alto Networks / Cloud NGFW
All versions affected Palo Alto Networks / PAN-OS
12.2.0 < 12.2.4-h2 12.1.0 < 12.1.10-h4 11.2.0 < 11.2.16-h2 11.1.0 < 11.1.16-h5
Palo Alto Networks / Prisma Access
12.1.0 < 12.1.10-h4 11.2.0
References
Credits
internal security research teams