CVE-2026-0249Disclosure(paloaltonetworks / globalprotect)

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacker to intercept encrypted communications and potentially compromise the endpoint. This can enable a local non-administrative operating system user or an attacker on the same subnet to redirect traffic to an unauthorized server and facilitate the installation of malicious software. The GlobalProtect app on Linux, Windows, iOS and GlobalProtect UWP app are not affected.

paloaltonetworks CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://security.paloaltonetworks.com/CVE-2026-0249

Weakness type (CWE)

CWE-295

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

globalprotect

Threat summary

4 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 4 signals
Disclosure: 3 classified signals
General: 1 classified signal
Peaked 2d ago at 2 mentions (2026-05-13); latest day: 1
4 total mentions across 3 days

Affected systems

Vendors

paloaltonetworks

Products

globalprotect

2 versions affected across 1 product

Deep dive

Activity timeline4 mentions / 3d

Signal classification2 categories

Disclosure

375.0%

General

125.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-05-13	2	Disclosure1General1
2026-05-14	1	Disclosure1
2026-05-17	1	Disclosure1

Full discourse4 posts

Israel@f1tym1144d
Disclosure
CVE-2026-0249 | Palo Alto GlobalProtect App up to 6.0.12/6.0.13/6.1.12 certificate validation (WID-SEC-2026-1535) https://ift.tt/QPKlu7e A vulnerability was found in Palo Alto GlobalProtect App up to 6.0.12/6.0.13/6.1.12. It has been classified as problematic. The impacted ele…
Post summary
A new CVE-2026-0249 affecting Palo Alto GlobalProtect App up to version 6.1.12 has been disclosed as a certificate validation issue, but no PoC, exploit, active exploitation, or patch details are provided.
0000061
974 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds147d
Disclosure
CVE-2026-0249 Improper Certificate Validation in Palo Alto Networks GlobalProtect App Enables Traffic Interception https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-0249
Post summary
A new CVE (CVE-2026-0249) describing improper certificate validation in Palo Alto Networks' GlobalProtect App, allowing traffic interception, has been disclosed, but no PoC, exploit code, active exploitation, or patch information is provided in the text.
0000091
4.0K followersView on X
Infoflowcloud@infoflowcloud147d
General
🚨*CVE* CVE-2026-0249 Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacker to intercept encrypted communications and pote… https://www.cve.org/CVERecord?id=CVE-2026-0249 ----- Traducción: CVE-2026-0249 Mú… http://infoflow.cloud`
Post summary
The message announces CVE-2026-0249 with brief technical details but does not provide a PoC, exploit, patch, or evidence of active exploitation.
0000041
77 followersView on X
CVE@CVEnew147d
Disclosure
CVE-2026-0249 Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacker to intercept encrypted communications and pote… https://www.cve.org/CVERecord?id=CVE-2026-0249
Post summary
The text references CVE‑2026‑0249 as a certificate‑validation flaw that could enable traffic interception, but offers no proof of exploitation, patches, or active attacks.
00000213
57.5K followersView on X

CPE platform detail14 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

14 of 14 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	paloaltonetworks	globalprotect	-	android	-
App	paloaltonetworks	globalprotect	-	chrome	-
App	paloaltonetworks	globalprotect	-	macos	-
App	paloaltonetworks	globalprotect	6.2.8	macos	-
App	paloaltonetworks	globalprotect	6.2.8	macos	-
App	paloaltonetworks	globalprotect	6.2.8	macos	-
App	paloaltonetworks	globalprotect	6.3.3	macos	-
App	paloaltonetworks	globalprotect	6.3.3	macos	-
App	paloaltonetworks	globalprotect	6.3.3	macos	-
App	paloaltonetworks	globalprotect	6.3.3	macos	-
App	paloaltonetworks	globalprotect	6.3.3	macos	-
App	paloaltonetworks	globalprotect	6.3.3	macos	-
App	paloaltonetworks	globalprotect	6.3.3	macos	-
App	paloaltonetworks	globalprotect	6.3.3	macos	-

Explore more

Back to dashboard paloaltonetworks CVEs globalprotect vulnerabilities

What researchers are saying

CVE-2026-0249

Israel[verified]@f1tym1Disclosure

A new CVE-2026-0249 affecting Palo Alto GlobalProtect App up to version 6.1.12 has been disclosed as a certificate validation issue, but no PoC, exploit, active exploitation, or patch details are provided.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

A new CVE (CVE-2026-0249) describing improper certificate validation in Palo Alto Networks' GlobalProtect App, allowing traffic interception, has been disclosed, but no PoC, exploit code, active exploitation, or patch information is provided in the text.

Infoflowcloud@infoflowcloudGeneral

The message announces CVE-2026-0249 with brief technical details but does not provide a PoC, exploit, patch, or evidence of active exploitation.

CVE@CVEnewDisclosure

The text references CVE‑2026‑0249 as a certificate‑validation flaw that could enable traffic interception, but offers no proof of exploitation, patches, or active attacks.