- Description
- A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway. The GlobalProtect app on iOS is not affected.
- Source
- psirt@paloaltonetworks.com
- NVD status
- Analyzed
- Products
- globalprotect
CVSS 4.0
- Type
- Secondary
- Base score
- 5.2
- Impact score
- -
- Exploitability score
- -
- Vector string
- CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber
- Severity
- MEDIUM
CVSS 3.1
- Type
- Primary
- Base score
- 8.1
- Impact score
- 5.9
- Exploitability score
- 2.2
- Vector string
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
- psirt@paloaltonetworks.com
- CWE-787
- Hype score
- Not currently trending
[CVE Analysis] CVE-2026-0250: GlobalProtect Buffer Overflow Grants SYSTEM Execution via MITM Against Remote OT Operators https://t.co/mNWDChUTZ6 #ICS #OTSecurity #SCADA #CriticalInfrastructure
@breachspider
27 Jul 2026
24 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2026-0250 | Palo Alto GlobalProtect App/GlobalProtect UWP App prior 6.3.3-h9 (6.3.3-999) out-of-bounds write (EUVD-2026-30101 / WID-SEC-2026-1535) https://t.co/fBwzVjhvpH A vulnerability, which was classified as critical, was found in Palo Alto GlobalProtect App and GlobalP
@f1tym1
17 May 2026
39 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨*CVE* CVE-2026-0250 A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentiall… https://t.co/fvEg6LjOl9 ----- Traducción: CVE-2026-0250 Ex… https://t.co/utmtN
@infoflowcloud
13 May 2026
40 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:linux:*:*",
"matchCriteriaId": "A27BA94F-A5CE-4D05-AAF3-6F1278F3478F",
"versionEndExcluding": "6.0.12",
"versionStartIncluding": "6.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:macos:*:*",
"matchCriteriaId": "821399ED-2A5C-4684-841D-BE489E85FB72",
"versionEndExcluding": "6.0.13",
"versionStartIncluding": "6.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:windows:*:*",
"matchCriteriaId": "518C5EB1-B8A3-4B05-B727-47EA7B1FE513",
"versionEndExcluding": "6.0.13",
"versionStartIncluding": "6.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:android:*:*",
"matchCriteriaId": "D8542C50-8CCA-41D4-9CC5-5DC199631340",
"versionEndExcluding": "6.0.15",
"versionStartIncluding": "6.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:chrome:*:*",
"matchCriteriaId": "6FC98EFE-3179-4EE2-927B-1674DBC1B6BC",
"versionEndExcluding": "6.0.15",
"versionStartIncluding": "6.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:android:*:*",
"matchCriteriaId": "C6CA9D61-7D4D-489F-9640-D88A30F6037A",
"versionEndExcluding": "6.1.14",
"versionStartIncluding": "6.1.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:chrome:*:*",
"matchCriteriaId": "541408B7-62AB-4A23-AD6B-8EB9298FBD0A",
"versionEndExcluding": "6.1.14",
"versionStartIncluding": "6.1.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:macos:*:*",
"matchCriteriaId": "84C4C650-DBCF-488A-AD29-84347162D48B",
"versionEndExcluding": "6.2.8",
"versionStartIncluding": "6.2.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:windows:*:*",
"matchCriteriaId": "98296E39-B40D-4F25-9D0C-C9CACFE25814",
"versionEndExcluding": "6.2.8",
"versionStartIncluding": "6.2.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:universal_windows_platform:*:*",
"matchCriteriaId": "3836E3A8-3329-4EA9-AE76-3F1A3A17BC81",
"versionEndExcluding": "6.3.3",
"versionStartIncluding": "6.3.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:windows:*:*",
"matchCriteriaId": "3A842EBF-EA01-4D05-96C5-7F2061951423",
"versionEndExcluding": "6.3.3",
"versionStartIncluding": "6.3.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:android:*:*",
"matchCriteriaId": "034EDBA0-F7C4-40A3-AC7F-161126A4D74B",
"versionEndExcluding": "6.3.4",
"versionStartIncluding": "6.3.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:chrome:*:*",
"matchCriteriaId": "D6F2ED5D-CA4D-48DD-8B1A-F08D45061B90",
"versionEndExcluding": "6.3.4",
"versionStartIncluding": "6.3.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.2.8:-:*:*:*:macos:*:*",
"matchCriteriaId": "F781BC4A-B907-4393-A94A-D200A0BD73E3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.2.8:-:*:*:*:windows:*:*",
"matchCriteriaId": "95312A9E-9204-451C-85F9-891312FDFAA4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.2.8:h1:*:*:*:macos:*:*",
"matchCriteriaId": "77C49DC4-CC2B-46C3-9122-40B399E657A6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.2.8:h7:*:*:*:macos:*:*",
"matchCriteriaId": "9F6A6D49-B2DE-4359-83B3-D3239559CE64",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.2.8:h7:*:*:*:windows:*:*",
"matchCriteriaId": "CDA02D18-0121-442D-844A-D7B8D70F4853",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:-:*:*:*:linux:*:*",
"matchCriteriaId": "D8495DBE-5B93-495D-9726-E4360942464B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:-:*:*:*:macos:*:*",
"matchCriteriaId": "47AAC03D-0E33-430D-AB58-CABCC1546285",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:-:*:*:*:universal_windows_platform:*:*",
"matchCriteriaId": "0D7A9225-A2BA-4357-8048-A1D2E3047C15",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:-:*:*:*:windows:*:*",
"matchCriteriaId": "8BD47595-78F1-4CD4-AD9A-572C1B128FD4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h1:*:*:*:linux:*:*",
"matchCriteriaId": "E4CF788E-01C0-4D49-9E83-EFD161E9B112",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h1:*:*:*:macos:*:*",
"matchCriteriaId": "1BCA9A56-9AFB-4C97-B597-C3F1DC786A35",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h2:*:*:*:linux:*:*",
"matchCriteriaId": "3E23B006-1A50-4ABA-A173-F784CEE443FD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h2:*:*:*:macos:*:*",
"matchCriteriaId": "D3632AD0-54EB-4CA4-AB41-983B6965B30E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h2:*:*:*:windows:*:*",
"matchCriteriaId": "8868A339-6229-487A-8D16-4B06ECB132AE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h3:*:*:*:macos:*:*",
"matchCriteriaId": "82E3F152-A98F-4B12-B9B7-8F2E3DB8A6A5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h3:*:*:*:windows:*:*",
"matchCriteriaId": "FB1C2ACF-8931-410A-BFE8-2E4DE3D15A0D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h4:*:*:*:macos:*:*",
"matchCriteriaId": "EC0A413D-5F2C-4FE8-ADE6-A78244A7E132",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h4:*:*:*:windows:*:*",
"matchCriteriaId": "2C0EAAFC-5ED3-4D96-A0CE-EDBD4246CD7A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h6:*:*:*:macos:*:*",
"matchCriteriaId": "B7A8F2F7-85C7-4456-9E71-F94F3DF96356",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h6:*:*:*:windows:*:*",
"matchCriteriaId": "7D4FFE1D-5707-4DC4-B783-46AAA5D8D037",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h7:*:*:*:macos:*:*",
"matchCriteriaId": "7472FAD0-A40D-437A-82DA-70A7B959A62C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h7:*:*:*:windows:*:*",
"matchCriteriaId": "AFC6221C-3D39-4F51-86F4-826D7B72D4E5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h8:*:*:*:macos:*:*",
"matchCriteriaId": "B6C0F18B-802C-43D5-AEDD-05B7E5A53CED",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h8:*:*:*:windows:*:*",
"matchCriteriaId": "EC8FBE7C-A3FE-4CBB-947D-F2BA1DB0D39C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h9:*:*:*:universal_windows_platform:*:*",
"matchCriteriaId": "64157CC4-AADA-425B-B26E-C529A973A6DA",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]