CVE-2026-0296 | BDVDB-2026-358581 Detail
Palo Alto NetworksGlobalProtect App
Description#
Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. VPN tunnel traffic is not impacted. The GlobalProtect app on iOS, Android, and Chrome OS is not affected.
Impact#
CAPEC-94 Man in the Middle Attack
Weaknesses#
- CWE-295 Improper Certificate Validation
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.