PT-2026-145441

CVE-2026-0325

·

Published

2026-11-11

·

Updated

2026-11-11

Description by

CVSS 4.0
1.3
Low
MetricsAV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:D/RE:M/U:Amber
An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated attacker with valid GlobalProtect credentials to bypass IP address restrictions and circumvent network access controls that rely on source IP filtering.
Cloud NGFW is not affected by this vulnerability.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-940: Improper Verification of Source of a Communication Channel
Related identifiers
CVE-2026-0325
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com