CVE-2026-0319
CVE-2026-0319 · PAN-OS: Improper Input Handling Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user. Cloud NGFW and Panorama are not affected by this vulnerability.
CVSS 4.9 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Affected products and versions
cloud ngfw
- Versions
- All: Not affected (custom)
No fix published
pan-os
- Versions
- ≥ 12.2.0, < 12.2.4: Affected; ≥ 12.2.4: Not affected (custom)
- ≥ 12.1.0, < 12.1.10-h2: Affected; ≥ 12.1.10-h2: Not affected; ≥ 12.1.7-h8: Not affected; ≥ 12.1.4-h12: Not affected (custom)
- ≥ 11.2.0, < 11.2.16: Affected; ≥ 11.2.16: Not affected; ≥ 11.2.13-h3: Not affected; ≥ 11.2.10-h15: Not affected; ≥ 11.2.7-h21: Not affected; ≥ 11.2.4-h22: Not affected (custom)
- ≥ 11.1.0, < 11.1.16-h3: Affected; ≥ 11.1.16-h3: Not affected; ≥ 11.1.13-h15: Not affected; ≥ 11.1.10-h35: Not affected; ≥ 11.1.7-h11: Not affected; ≥ 11.1.6-h39: Not affected; ≥ 11.1.4-h37: Not affected (custom)
- ≥ 10.2.0, < 10.2.18-h12: Affected; ≥ 10.2.18-h12: Not affected; ≥ 10.2.16-h11: Not affected; ≥ 10.2.13-h26: Not affected; ≥ 10.2.10-h41: Not affected; ≥ 10.2.7-h38: Not affected (custom)
Update to 10.2.7-h38; Update to 11.1.4-h37; Update to 11.2.4-h22; Update to 12.1.4-h12; Update to 12.2.4
prisma access
- Versions
- ≥ 12.1.0, < 12.1.7-h8: Affected; ≥ 12.1.7-h8: Not affected (custom)
- ≥ 11.2.0, < 11.2.7-h21: Affected; ≥ 11.2.7-h21: Not affected (custom)
- ≥ 10.2.0, < 10.2.10-h41: Affected; ≥ 10.2.10-h41: Not affected (custom)
Update to 10.2.10-h41; Update to 11.2.7-h21; Update to 12.1.7-h8