Vulnerability in Palo Alto Networks Globalprotect App
CVE-2026-0296
Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. VPN tunnel traffic is not…
Vulnerability class: Improper Certificate Validation
Affected products
- Palo Alto Networks Globalprotect App — versions 6.3.0, 6.2.0, 6.0.0
Weakness classification (CWE)
References
- psirt@paloaltonetworks.com (vendor-advisory)