Dashboard / CVE-2026-0241

CVE-2026-0241

MEDIUM
MEDIUM Priority: 0.02 BB Relevance: 55/100
Published: 2026-05-13 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Adjacent Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: None
UI: None
S: X
AT: None
VC: Low
VI: Low
VA: High

Description

Incorrect Authorization vulnerabilities in Trust Protection Foundation allow attackers to bypass access controls and perform unauthorized actions on restricted resources.

Weakness Classification (1)

Affected Software (4)

VendorProductVersion
paloaltonetworks trust_protection_foundation 24.1.0 – 24.1.13
paloaltonetworks trust_protection_foundation 24.3.0 – 24.3.6
paloaltonetworks trust_protection_foundation 25.1.0 – 25.1.8
paloaltonetworks trust_protection_foundation 25.3.0 – 25.3.3

References & Advisories (1)

Bug Bounty Relevance

55 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

5.1 / 10.0 v4.0
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:L/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber

EPSS — Exploitation Probability

0.34%
Raw Score 0.003360
Percentile 27.0%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00336
2026-10-28
0.00336

Intelligence Sources

nvd ref →

External Links