Dashboard / CVE-2026-0299

CVE-2026-0299

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 37/100
Published: 2026-08-13 Modified: 2026-10-23 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: X
AT: None
VC: High
VI: High
VA: High

Description

Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on iOS, Android, and Chrome OS is not affected.

Weakness Classification (1)

Affected Software (57)

VendorProductVersion
paloaltonetworks globalprotect 6.0.0 – 6.0.15
paloaltonetworks globalprotect 6.0.0 – 6.0.15
paloaltonetworks globalprotect 6.0.0 – 6.0.15
paloaltonetworks globalprotect 6.2.0 – 6.2.8
paloaltonetworks globalprotect 6.2.0 – 6.2.8
paloaltonetworks globalprotect 6.3.0 – 6.3.3
paloaltonetworks globalprotect 6.3.0 – 6.3.3
paloaltonetworks globalprotect 6.3.0 – 6.3.3
paloaltonetworks globalprotect 6.2.8
paloaltonetworks globalprotect 6.2.8
paloaltonetworks globalprotect 6.2.8
paloaltonetworks globalprotect 6.2.8
paloaltonetworks globalprotect 6.2.8
paloaltonetworks globalprotect 6.2.8
paloaltonetworks globalprotect 6.2.8
paloaltonetworks globalprotect 6.2.8
paloaltonetworks globalprotect 6.2.8
paloaltonetworks globalprotect 6.2.8
paloaltonetworks globalprotect 6.2.8
paloaltonetworks globalprotect 6.2.8
paloaltonetworks globalprotect 6.2.8
paloaltonetworks globalprotect 6.2.8
paloaltonetworks globalprotect 6.2.8
paloaltonetworks globalprotect 6.2.8
paloaltonetworks globalprotect 6.2.8
paloaltonetworks globalprotect 6.2.8
paloaltonetworks globalprotect 6.2.8
paloaltonetworks globalprotect 6.2.8
paloaltonetworks globalprotect 6.2.8
paloaltonetworks globalprotect 6.2.8
Showing 30 of 57 entries

References & Advisories (1)

Bug Bounty Relevance

37 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.9 / 10.0 v4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber

EPSS — Exploitation Probability

0.17%
Raw Score 0.001690
Percentile 6.3%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00169
2026-10-28
0.00169

Intelligence Sources

nvd ref →

External Links