high7.4
CVE-2026-0296
Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle (MitM) acces…
Impact
Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. VPN tunnel traffic is not impacted. The GlobalProtect app on iOS, Android, and Chrome OS is not affected.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Paloaltonetworks | Globalprotect | from 6.0.0 before 6.0.15 from 6.2.0 before 6.2.8 from 6.2.0 through 6.2.9 from 6.3.0 before 6.3.3 All versions Version 6.2.8 |