Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-06-21 | 1 | Patch1 |
| 2026-08-13 | 3 | Disclosure1General1Patch1 |
Looks like PANW finally patched the downgrade attack used by @AmberWolfSec 's NachoVPN. Another favourite IA vector lost. 🥲 No mention of AmberWolf in the acknowledgements, though... https://security.paloaltonetworks.com/CVE-2026-0299
Post summary
The tweet announces that Palo Alto Networks has released a patch for CVE-2026-0299, a downgrade attack used by NachoVPN, and highlights that the vulnerability is now resolved.
🚨*CVE* CVE-2026-0299 Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windo… https://www.cve.org/CVERecord?id=CVE-2026-0299 ----- Traducción: CVE-2026-0299 Vu… https://infoflow.cloud`
Post summary
The post announces the existence of CVE-2026-0299, describing it as a local privilege escalation in Palo Alto's GlobalProtect app, but provides no evidence of exploitation, patches, or exploits.
CVE-2026-0299 Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windo… https://www.cve.org/CVERecord?id=CVE-2026-0299
Post summary
The text briefly cites CVE-2026-0299 as a local privilege escalation issue in Palo Alto GlobalProtect, without providing PoC, exploit details, patches, or evidence of active exploitation.
CVE-2026-0299、Adobe製品に関連する深刻な脆弱性を発見。パッチはリリース済み。未適用の環境は注意が必要。
Post summary
CVE-2026-0299 is a serious vulnerability in Adobe products; a patch has been released, but unpatched environments are still at risk.