CVE-2026-0328

UNKNOWN 0.0

PAN-OS: User Impersonation through GlobalProtect Portal

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Authentication bypass vulnerabilities in the GlobalProtect™ portal and gateway of Palo Alto Networks PAN-OS® software enables an unauthenticated user to bypass security restrictions and establish an unauthorized VPN connection. Panorama, Cloud NGFW, and Prisma® Access are not affected by this vulnerability.

CWE	CWE-287
Vendor	palo alto networks
Product	cloud ngfw
Published	Nov 11, 2026

Stay Ahead of the Next One

Get instant alerts for palo alto networks cloud ngfw

Be the first to know when new unknown vulnerabilities affecting palo alto networks cloud ngfw are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Palo Alto Networks / Cloud NGFW

All versions affected

Palo Alto Networks / PAN-OS

12.2.0 < 12.2.4-h2 12.1.0 < 12.1.10-h4 11.2.0 < 11.2.16-h2 11.1.0 < 11.1.16-h5 10.2.0 < 10.2.18-h14

Palo Alto Networks / Prisma Access

All versions affected

References

NVD ↗ CVE.org ↗ EPSS Data ↗

security.paloaltonetworks.com: https://security.paloaltonetworks.com/CVE-2026-0328

Credits

OpenAI Rotem Bar (internal reporter)