Palo Alto Networks Inc. GlobalProtect App

Name: Palo Alto Networks Inc. GlobalProtect App
Brand: Palo Alto Networks Inc.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical14high2medium1low

updated 2026-10-28

vulnerabilities (24)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-0117US	—	0.16% (6th)	Exploit	no fix	2025-03-12	4 versions
CVE-2024-5921US	high8.8	1.46% (73rd)	—	no fix	2024-11-27	5 versions
CVE-2026-0298US	high8.1	0.66% (51st)	—	no fix	2026-08-13	3 versions
CVE-2026-0297US	high8.1	0.60% (48th)	—	no fix	2026-08-13	5 versions
CVE-2025-0118US	high8.0	0.46% (39th)	—	no fix	2025-03-12	4 versions
CVE-2024-8687US	high7.1	0.41% (35th)	—	no fix	2024-09-11	5 versions
CVE-2026-0250US	high8.1	0.39% (33rd)	—	no fix	2026-05-13	7 versions
CVE-2024-5908US	high7.5	0.37% (30th)	—	no fix	2024-06-12	4 versions
CVE-2024-9473US	high7.8	0.29% (21st)	—	no fix	2024-10-09	5 versions
CVE-2026-0296US	high7.4	0.26% (17th)	—	no fix	2026-08-13	4 versions
CVE-2024-5915US	high7.8	0.21% (11th)	—	no fix	2024-08-14	5 versions
CVE-2026-0251US	high7.8	0.18% (8th)	—	no fix	2026-05-13	5 versions
CVE-2025-0141US	—	0.18% (7th)	—	no fix	2025-07-09	6 versions
CVE-2026-0299US	high7.8	0.17% (6th)	—	no fix	2026-08-13	4 versions
CVE-2025-0120US	high7.0	0.16% (5th)	—	no fix	2025-04-11	5 versions
CVE-2025-0131US	—	0.16% (5th)	—	no fix	2025-05-14	2 versions
CVE-2026-0307US	—	0.16% (5th)	—	no fix	2026-09-10	3 versions
CVE-2025-0140US	—	0.15% (4th)	—	no fix	2025-07-09	5 versions
CVE-2025-2179US	—	0.14% (3rd)	—	no fix	2025-07-29	6.0 → 6.2.9
CVE-2025-0135US	low3.3	0.14% (3rd)	—	no fix	2025-05-14	2 versions
CVE-2025-2183US	—	0.12% (2nd)	—	no fix	2025-08-13	4 versions
CVE-2026-0249US	medium6.5	0.11% (1st)	—	no fix	2026-05-13	5 versions
CVE-2026-0295US	high7.0	0.11% (1st)	—	no fix	2026-08-13	3 versions
CVE-2026-0267US	medium5.5	0.10% (1st)	—	no fix	2026-06-10	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-266Incorrect Privilege Assignment4 CVEs
CWE-295Improper Certificate Validation4 CVEs
CWE-426Untrusted Search Path4 CVEs
CWE-250Execution with Unnecessary Privileges2 CVEs
CWE-532Insertion of Sensitive Information into Log File2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-287Improper Authentication1 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)24 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan