CVE-2026-0296

Name of the Vulnerable Software and Affected Versions Palo Alto Networks GlobalProtect app (affected versions not specified)

Description Improper certificate validation allows an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. MitM is a technique where an attacker secretly relays and possibly alters the communications between two parties who believe they are directly communicating with each other. VPN tunnel traffic is not impacted. The app on iOS, Android, and Chrome OS is not affected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.