CVE-2026-0250Disclosure(paloaltonetworks / globalprotect)

LOWCVSS 8.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway. The GlobalProtect app on iOS is not affected.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • globalprotect

Threat summary

  • 6 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 5 signals
  • Disclosure: 3 classified signals
  • General: 3 classified signals
  • Peaked 3d ago at 2 mentions (2026-05-13); latest day: 1
  • 6 total mentions across 4 days

Affected systems

Products
globalprotect

2 versions affected across 1 product

Deep dive

Activity timeline6 mentions / 4d
01122Mentions · 2026-05-13: 2Mentions · 2026-05-14: 2Mentions · 2026-05-17: 1Mentions · 2026-07-27: 1Technical Details · 2026-05-13: 2Technical Details · 2026-05-14: 1Technical Details · 2026-05-17: 1Technical Details · 2026-07-27: 105-1305-1405-1707-27
Signal classification2 categories
Disclosure
350.0%
General
350.0%
Referenced assets7 URLs
Classification over time
DateTotalLabels
2026-05-132
Disclosure1General1
2026-05-142
Disclosure1General1
2026-05-171
General1
2026-07-271
Disclosure1
Full discourse6 posts
  • VulDB 🛡@vuldb
    Disclosure

    There is a new vulnerability with elevated criticality in Palo Alto GlobalProtect App and GlobalProtect UWP App (CVE-2026-0250) https://vuldb.com/vuln/363681

    Post summary

    The post announces a new critical vulnerability (CVE‑2026‑0250) in Palo Alto GlobalProtect applications and includes a link to a vulnerability database, but provides no technical details, exploit code, patch information, or evidence of active exploitation.

    01010114
    2.2K followersView on X
  • CVE@CVEnew
    General

    CVE-2026-0250 A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentiall… https://www.cve.org/CVERecord?id=CVE-2026-0250

    Post summary

    The post briefly identifies a buffer overflow vulnerability in Palo Alto Networks GlobalProtect that could allow an attacker to disrupt process execution, but it provides no evidence of exploitation, a PoC, or a patch.

    00001245
    57.5K followersView on X
  • BREACHSPIDER@breachspider
    Disclosure

    [CVE Analysis] CVE-2026-0250: GlobalProtect Buffer Overflow Grants SYSTEM Execution via MITM Against Remote OT Operators https://breachspider.com/intel/2026-07-27-cve-2026-0250-globalprotect-buffer-overflow-grants-system-ex #ICS #OTSecurity #SCADA #CriticalInfrastructure

    Post summary

    The post summarizes a newly disclosed buffer overflow flaw in GlobalProtect that could allow MITM attacks to execute code with SYSTEM privileges on remote OT sites, but it does not provide a PoC, exploit tool, sign of active exploitation, or patch information.

    00000104
    2.3K followersView on X
  • Israel@f1tym1
    General

    CVE-2026-0250 | Palo Alto GlobalProtect App/GlobalProtect UWP App prior 6.3.3-h9 (6.3.3-999) out-of-bounds write (EUVD-2026-30101 / WID-SEC-2026-1535) https://ift.tt/LV2UQrk A vulnerability, which was classified as critical, was found in Palo Alto GlobalProtect App and GlobalP…

    Post summary

    CVE-2026-0250 is an out-of-bounds write vulnerability in Palo Alto GlobalProtect App versions prior to 6.3.3-h9, classified as critical, with no PoC, exploit, or patch details disclosed in the text.

    0000059
    974 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-0250 Buffer Overflow in Palo Alto Networks GlobalProtect Enables Arbitrary Cod... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-0250 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3

    Post summary

    The message highlights CVE‑2026‑0250, a buffer overflow vulnerability in Palo Alto Networks GlobalProtect that could allow arbitrary code execution, and links to additional vulnerability details, but provides no PoC, exploit, or patch information.

    0000074
    4.0K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-0250 A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentiall… https://www.cve.org/CVERecord?id=CVE-2026-0250 ----- Traducción: CVE-2026-0250 Ex… http://infoflow.cloud`

    Post summary

    The post announces a buffer overflow vulnerability (CVE-2026-0250) in Palo Alto Networks GlobalProtect that could allow a man-in-the-middle attacker to disrupt system processes, but it contains no PoC, exploit code, or patch information.

    0000049
    77 followersView on X
CPE platform detail31 entries

31 of 31 entries

PartVendorProductVersionTarget SWTarget HW
Apppaloaltonetworksglobalprotect-android-
Apppaloaltonetworksglobalprotect-chrome-
Apppaloaltonetworksglobalprotect-linux-
Apppaloaltonetworksglobalprotect-macos-
Apppaloaltonetworksglobalprotect-universal_windows_platform-
Apppaloaltonetworksglobalprotect-windows-
Apppaloaltonetworksglobalprotect6.2.8macos-
Apppaloaltonetworksglobalprotect6.2.8windows-
Apppaloaltonetworksglobalprotect6.2.8macos-
Apppaloaltonetworksglobalprotect6.2.8macos-
Apppaloaltonetworksglobalprotect6.2.8windows-
Apppaloaltonetworksglobalprotect6.3.3linux-
Apppaloaltonetworksglobalprotect6.3.3macos-
Apppaloaltonetworksglobalprotect6.3.3universal_windows_platform-
Apppaloaltonetworksglobalprotect6.3.3windows-
Apppaloaltonetworksglobalprotect6.3.3linux-
Apppaloaltonetworksglobalprotect6.3.3macos-
Apppaloaltonetworksglobalprotect6.3.3linux-
Apppaloaltonetworksglobalprotect6.3.3macos-
Apppaloaltonetworksglobalprotect6.3.3windows-
Apppaloaltonetworksglobalprotect6.3.3macos-
Apppaloaltonetworksglobalprotect6.3.3windows-
Apppaloaltonetworksglobalprotect6.3.3macos-
Apppaloaltonetworksglobalprotect6.3.3windows-
Apppaloaltonetworksglobalprotect6.3.3macos-
Apppaloaltonetworksglobalprotect6.3.3windows-
Apppaloaltonetworksglobalprotect6.3.3macos-
Apppaloaltonetworksglobalprotect6.3.3windows-
Apppaloaltonetworksglobalprotect6.3.3macos-
Apppaloaltonetworksglobalprotect6.3.3windows-
Apppaloaltonetworksglobalprotect6.3.3universal_windows_platform-

Explore more