high8.1
CVE-2026-0298
An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect™ app on Win…
Impact
An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on an affected client. The GlobalProtect app on Linux, macOS, iOS, Android, and Chrome OS is not affected.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Paloaltonetworks | Globalprotect | from 6.0.0 before 6.0.15 from 6.2.0 before 6.2.8 from 6.3.0 before 6.3.3 Versions 6.0.15, 6.2.8, 6.3.3 |