Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-0250

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway. The GlobalProtect app on iOS is not affected.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:0ae9f5d333f969d923c76b487766c551b38601d6ac62fb2d89e887643a639e61
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 7 assertions

{"defaultStatus":"unaffected","platforms":["Android","Chrome OS"],"product":"GlobalProtect App","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"6.1.13","status":"unaffected"}],"lessThan":"6.1.13","status":"affected","version":"6.1","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:36c1c7a337464cb88d8e57fc5195272140f2c4e12f58d36d6f7823581f65965a · sha256:a4b38f65239344a3… · /containers/cna/affected/1

{"defaultStatus":"unaffected","platforms":["Windows"],"product":"GlobalProtect UWP App","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"6.3.3-h10","status":"unaffected"}],"lessThan":"6.3.3-h10","status":"affected","version":"6.3","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:36c1c7a337464cb88d8e57fc5195272140f2c4e12f58d36d6f7823581f65965a · sha256:a4b38f65239344a3… · /containers/cna/affected/5

{"defaultStatus":"unaffected","platforms":["Windows","MacOS"],"product":"GlobalProtect App","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"6.3.3-h9 (6.3.3-999)","status":"unaffected"}],"lessThan":"6.3.3-h9 (6.3.3-999)","status":"affected","version":"6.3.0","versionType":"custom"},{"changes":[{"at":"6.2.8-h10 (6.2.8-948)","status":"unaffected"}],"lessThan":"6.2.8-h10 (6.2.8-948)","status":"affected","version":"6.2.0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:36c1c7a337464cb88d8e57fc5195272140f2c4e12f58d36d6f7823581f65965a · sha256:a4b38f65239344a3… · /containers/cna/affected/0

{"defaultStatus":"unaffected","platforms":["iOS"],"product":"GlobalProtect App","vendor":"Palo Alto Networks","versions":[{"status":"unaffected","version":"All","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:36c1c7a337464cb88d8e57fc5195272140f2c4e12f58d36d6f7823581f65965a · sha256:a4b38f65239344a3… · /containers/cna/affected/6

{"defaultStatus":"unaffected","platforms":["Linux"],"product":"GlobalProtect App","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"6.3.3-h2 (6.3.3-42)","status":"unaffected"}],"lessThan":"6.3.3-h2 (6.3.3-42)","status":"affected","version":"6.3.0","versionType":"custom"},{"changes":[{"at":"6.0.11","status":"unaffected"}],"lessThan":"6.0.11","status":"affected","version":"6.0.0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:36c1c7a337464cb88d8e57fc5195272140f2c4e12f58d36d6f7823581f65965a · sha256:a4b38f65239344a3… · /containers/cna/affected/2

{"defaultStatus":"unaffected","platforms":["Android","Chrome OS"],"product":"GlobalProtect App","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"6.0.14","status":"unaffected"}],"lessThan":"6.0.14","status":"affected","version":"6.0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:36c1c7a337464cb88d8e57fc5195272140f2c4e12f58d36d6f7823581f65965a · sha256:a4b38f65239344a3… · /containers/cna/affected/4

{"defaultStatus":"unaffected","platforms":["Windows","MacOS"],"product":"GlobalProtect App","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"6.0.13","status":"unaffected"}],"lessThan":"6.0.13","status":"affected","version":"6.0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:36c1c7a337464cb88d8e57fc5195272140f2c4e12f58d36d6f7823581f65965a · sha256:a4b38f65239344a3… · /containers/cna/affected/3

Affected products and versions

7 source assertions
{"defaultStatus":"unaffected","platforms":["Android","Chrome OS"],"product":"GlobalProtect App","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"6.1.13","status":"unaffected"}],"lessThan":"6.1.13","status":"affected","version":"6.1","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:36c1c7a337464cb88d8e57fc5195272140f2c4e12f58d36d6f7823581f65965a · sha256:a4b38f65239344a3… · /containers/cna/affected/1
{"defaultStatus":"unaffected","platforms":["Windows"],"product":"GlobalProtect UWP App","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"6.3.3-h10","status":"unaffected"}],"lessThan":"6.3.3-h10","status":"affected","version":"6.3","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:36c1c7a337464cb88d8e57fc5195272140f2c4e12f58d36d6f7823581f65965a · sha256:a4b38f65239344a3… · /containers/cna/affected/5
{"defaultStatus":"unaffected","platforms":["Windows","MacOS"],"product":"GlobalProtect App","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"6.3.3-h9 (6.3.3-999)","status":"unaffected"}],"lessThan":"6.3.3-h9 (6.3.3-999)","status":"affected","version":"6.3.0","versionType":"custom"},{"changes":[{"at":"6.2.8-h10 (6.2.8-948)","status":"unaffected"}],"lessThan":"6.2.8-h10 (6.2.8-948)","status":"affected","version":"6.2.0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:36c1c7a337464cb88d8e57fc5195272140f2c4e12f58d36d6f7823581f65965a · sha256:a4b38f65239344a3… · /containers/cna/affected/0
{"defaultStatus":"unaffected","platforms":["iOS"],"product":"GlobalProtect App","vendor":"Palo Alto Networks","versions":[{"status":"unaffected","version":"All","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:36c1c7a337464cb88d8e57fc5195272140f2c4e12f58d36d6f7823581f65965a · sha256:a4b38f65239344a3… · /containers/cna/affected/6
{"defaultStatus":"unaffected","platforms":["Linux"],"product":"GlobalProtect App","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"6.3.3-h2 (6.3.3-42)","status":"unaffected"}],"lessThan":"6.3.3-h2 (6.3.3-42)","status":"affected","version":"6.3.0","versionType":"custom"},{"changes":[{"at":"6.0.11","status":"unaffected"}],"lessThan":"6.0.11","status":"affected","version":"6.0.0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:36c1c7a337464cb88d8e57fc5195272140f2c4e12f58d36d6f7823581f65965a · sha256:a4b38f65239344a3… · /containers/cna/affected/2
{"defaultStatus":"unaffected","platforms":["Android","Chrome OS"],"product":"GlobalProtect App","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"6.0.14","status":"unaffected"}],"lessThan":"6.0.14","status":"affected","version":"6.0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:36c1c7a337464cb88d8e57fc5195272140f2c4e12f58d36d6f7823581f65965a · sha256:a4b38f65239344a3… · /containers/cna/affected/4
{"defaultStatus":"unaffected","platforms":["Windows","MacOS"],"product":"GlobalProtect App","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"6.0.13","status":"unaffected"}],"lessThan":"6.0.13","status":"affected","version":"6.0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:36c1c7a337464cb88d8e57fc5195272140f2c4e12f58d36d6f7823581f65965a · sha256:a4b38f65239344a3… · /containers/cna/affected/3

Provider-owned CVSS observations

1 source assertion
{"metric":{"Automatable":"NO","Recovery":"USER","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"ADJACENT","baseScore":5.2,"baseSeverity":"MEDIUM","exploitMaturity":"UNREPORTED","privilegesRequired":"NONE","providerUrgency":"AMBER","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentiality…
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:36c1c7a337464cb88d8e57fc5195272140f2c4e12f58d36d6f7823581f65965a · sha256:a4b38f65239344a3… · /containers/cna/metrics/0/cvssV4_0

CWE assertions

1 source assertion
{"cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:36c1c7a337464cb88d8e57fc5195272140f2c4e12f58d36d6f7823581f65965a · sha256:a4b38f65239344a3… · /containers/cna/problemTypes/0/descriptions/0

Source references

1 source assertion
{"tags":["vendor-advisory"],"url":"https://security.paloaltonetworks.com/CVE-2026-0250"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:36c1c7a337464cb88d8e57fc5195272140f2c4e12f58d36d6f7823581f65965a · sha256:a4b38f65239344a3… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer