CVE Watch15 de out. de 2026

CVE-2026-0319

An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user t

CVSS

—

Sem CVSS

EPSS

0.3%

p20

KEV

—

Exploit Today

0-100

Publicado: 14 de out. de 2026 · Última mod.: 15 de out. de 2026 · CWE-754

EPSS · 30d

0.3%EPSS · 30 dias0.3%

2026-10-152026-11-06

Descrição técnica

An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user. Cloud NGFW and Panorama are not affected by this vulnerability.

Referências oficiais

security.paloaltonetworks.comhttps://security.paloaltonetworks.com/CVE-2026-0319

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-69066—

3.4%

——1Memory corruption in GPU driver due to improper validation of VMID reservation.13h CVE-2026-69006—

3.4%

——1Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.13h CVE-2026-48186—

3.4%

——1Improper handling of messages before AS security activation can cause unexpected behavior13h CVE-2026-35495—

4.2%

——1In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability13h CVE-2025-66368—

4.2%

——1Incorrect handling of SDP payload leads to a Denial of Service13h CVE-2025-66365—

4.2%

——1Incorrect handling of SIP packets leads to baseband crashes13h