CVE-2026-0307

highpriority · track · 0EPSS 0.002 · 5 %ileDERU

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.16% (5th) EPSS

CVSS 8.8 · high

Is it mine?

9 products

Check your exposure

Who says so?

2 sources

fstec_bdu · cert_bund

EPSS · scored 2026-10-27

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges. This GlobalProtect app on iOS, Android and ChromeOS is not impacted.

cvss

Technical severity, 0–10. One row per scoring source.

8.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5.9–8.8

v3.18.8highAV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v4.05.9mediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Ambersecondary · psirt@paloaltonetworks.com

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-426USCWE-426US

affected products (9)

Products and version ranges known to be affected.

Palo Alto Networks GlobalProtect App <6.0.15all versionscert_bundDE
Palo Alto Networks GlobalProtect App <6.2.8-h14all versionscert_bundDE
Palo Alto Networks GlobalProtect App <6.3.3-h15all versionscert_bundDE
Palo Alto Networks GlobalProtect≤ App <6.2.8-h14cert_bundDE
Palo Alto Networks GlobalProtect≤ App <6.0.15cert_bundDE
Palo Alto Networks GlobalProtect≤ App <6.3.3-h15cert_bundDE
Palo Alto Networks Inc. GlobalProtect App≤ 6.3.3-h15fstec_bduRU
Palo Alto Networks Inc. GlobalProtect App≤ 6.2.8-h14fstec_bduRU
Palo Alto Networks Inc. GlobalProtect App≤ 6.0.15fstec_bduRU

advisories (1)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2026-3283Palo Alto Networks GlobalProtect App: Schwachstelle ermöglicht PrivilegieneskalationDeutsch2026-09-09csaf · cert_bundDE
Ein lokaler Angreifer kann eine Schwachstelle in Palo Alto Networks GlobalProtect App ausnutzen, um Administratorrechte zu erlangen.

also known as (1)

Other names and identifiers for this entity.

BDU:2026-14571 fstec_bdu

sources

Which sources assert this record, and when.

fstec_bdu cert_bund NVD CVE.org MITRE

published 2026-09-10modified 2026-09-14

references (1) nvd

External citations — patches, advisories, analysis.

https://security.paloaltonetworks.com/CVE-2026-0307

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan