CVE-2026-0319

Awaiting Analysis Awaiting Analysis - Queue

Improper Input Handling in Palo Alto PAN-OS GlobalProtect

Publication date: 2026-10-14

Last updated on: 2026-10-15

Assigner: Palo Alto Networks, Inc.

Description

An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user. Cloud NGFW and Panorama are not affected by this vulnerability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-0319

EUVD

EUVD-2026-101633

Affected Vendors & Products

Vendor	Product	Version / Range
Palo	Alto	Networks PAN-OS 12.2.0
Palo	Alto	Networks PAN-OS 12.1.0
Palo	Alto	Networks PAN-OS 11.2.0
Palo	Alto	Networks PAN-OS 11.1.0
Palo	Alto	Networks PAN-OS 10.2.0
Palo	Alto	Networks Prisma Access 12.1.0
Palo	Alto	Networks Prisma Access 11.2.0
Palo	Alto	Networks Prisma Access 10.2.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-754	The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

Attack-Flow Graph

Executive Summary

This vulnerability allows an authenticated user to impersonate another user during GlobalProtect session establishment due to improper input handling in the GlobalProtect gateway of Palo Alto Networks PAN-OS software.

Detection Guidance

This vulnerability involves improper input handling in the GlobalProtect gateway allowing session hijacking. Detection requires checking for unusual user sessions or authentication anomalies in PAN-OS logs. Review GlobalProtect session logs for unexpected user identity associations or multiple sessions from the same IP. Check for logs indicating failed authentication attempts or session establishment under different user identities.

Impact Analysis

An attacker could gain unauthorized access to resources or data by impersonating a legitimate user, potentially leading to data breaches or unauthorized actions within the network.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, potentially violating compliance requirements such as GDPR or HIPAA, which mandate strict access controls and data protection measures.

Mitigation Strategies

Apply the latest PAN-OS update provided by Palo Alto Networks to patch the improper input handling vulnerability in the GlobalProtect gateway.

Hi! I’m here to help you understand CVE-2026-0319. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70