Dashboard / CVE-2026-0250

CVE-2026-0250

MEDIUM
MEDIUM Priority: 0.02 BB Relevance: 55/100
Published: 2026-05-13 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Adjacent Low Complexity No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: None
UI: None
S: X
AT: Present
VC: High
VI: High
VA: High

Description

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway. The GlobalProtect app on iOS is not affected.

Weakness Classification (1)

Affected Software (31)

VendorProductVersion
paloaltonetworks globalprotect 6.0.0 – 6.0.12
paloaltonetworks globalprotect 6.0.0 – 6.0.13
paloaltonetworks globalprotect 6.0.0 – 6.0.13
paloaltonetworks globalprotect 6.0.0 – 6.0.15
paloaltonetworks globalprotect 6.0.0 – 6.0.15
paloaltonetworks globalprotect 6.3.0 – 6.3.3
paloaltonetworks globalprotect 6.2.8
paloaltonetworks globalprotect 6.2.8
paloaltonetworks globalprotect 6.2.8
paloaltonetworks globalprotect 6.2.8
paloaltonetworks globalprotect 6.2.8
paloaltonetworks globalprotect 6.3.3
paloaltonetworks globalprotect 6.3.3
paloaltonetworks globalprotect 6.3.3
paloaltonetworks globalprotect 6.3.3
paloaltonetworks globalprotect 6.3.3
paloaltonetworks globalprotect 6.3.3
paloaltonetworks globalprotect 6.3.3
paloaltonetworks globalprotect 6.3.3
paloaltonetworks globalprotect 6.3.3
paloaltonetworks globalprotect 6.3.3
paloaltonetworks globalprotect 6.3.3
paloaltonetworks globalprotect 6.3.3
paloaltonetworks globalprotect 6.3.3
paloaltonetworks globalprotect 6.3.3
paloaltonetworks globalprotect 6.3.3
paloaltonetworks globalprotect 6.3.3
paloaltonetworks globalprotect 6.3.3
paloaltonetworks globalprotect 6.3.3
paloaltonetworks globalprotect 6.3.3
Showing 30 of 31 entries

References & Advisories (1)

Bug Bounty Relevance

55 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

5.2 / 10.0 v4.0
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber

EPSS — Exploitation Probability

0.39%
Raw Score 0.003920
Percentile 33.3%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00392
2026-10-28
0.00392

Intelligence Sources

nvd ref →

External Links