Dashboard / CVE-2026-0240

CVE-2026-0240

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 44/100
Published: 2026-05-13 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Adjacent Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: Low
UI: None
S: X
AT: Present
VC: High
VI: High
VA: None

Description

An information disclosure vulnerability in Trust Protection Foundation enables an authenticated attacker to obtain sensitive information from the server's vault. Successful exploitation of this issue allows the attacker to impersonate any user within the environment and arbitrarily modify configuration settings.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
paloaltonetworks trust_protection_foundation 24.1.0 – 24.1.13

References & Advisories (1)

Bug Bounty Relevance

44 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

4.5 / 10.0 v4.0
CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber

EPSS — Exploitation Probability

0.24%
Raw Score 0.002390
Percentile 15.1%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00239
2026-10-28
0.00239

Intelligence Sources

nvd ref →

External Links