CVE-2026-0250
Full vulnerability record from the local CVENow database.
Description
A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway. The GlobalProtect app on iOS is not affected.
Severity
MEDIUM
CVSS score
5.2
(v4.0)
Vulnerability status
Analyzed
Source identifier
Published
2026-05-13 19:16:59.260000
Last modified
2026-10-26 00:10:00.150000
View original CVE JSON
{
"id": "CVE-2026-0250",
"sourceIdentifier": "[email protected]",
"published": "2026-05-13T19:16:59.260",
"lastModified": "2026-10-26T00:10:00.150",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway.\n\n\n\nThe GlobalProtect app on iOS is not affected."
},
{
"lang": "es",
"value": "Una vulnerabilidad de desbordamiento de búfer existe en la aplicación Palo Alto Networks GlobalProtect™ que permite a un atacante de hombre en el medio interrumpir procesos del sistema y potencialmente ejecutar código arbitrario con privilegios de SYSTEM. Esta vulnerabilidad se activa durante el procesamiento de solicitudes y respuestas intercambiadas entre el Portal y el Gateway.\n\nLa aplicación GlobalProtect en iOS no se ve afectada."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Palo Alto Networks",
"product": "GlobalProtect App",
"defaultStatus": "unaffected",
"platforms": [
"Windows",
"MacOS"
],
"versions": [
{
"version": "6.3.0",
"lessThan": "6.3.3-h9 (6.3.3-999)",
"versionType": "custom",
"status": "affected",
"changes": [
{
"at": "6.3.3-h9 (6.3.3-999)",
"status": "unaffected"
}
]
},
{
"version": "6.2.0",
"lessThan": "6.2.8-h10 (6.2.8-948)",
"versionType": "custom",
"status": "affected",
"changes": [
{
"at": "6.2.8-h10 (6.2.8-948)",
"status": "unaffected"
}
]
}
]
},
{
"vendor": "Palo Alto Networks",
"product": "GlobalProtect App",
"defaultStatus": "unaffected",
"platforms": [
"Android",
"Chrome OS"
],
"versions": [
{
"version": "6.1",
"lessThan": "6.1.13",
"versionType": "custom",
"status": "affected",
"changes": [
{
"at": "6.1.13",
"status": "unaffected"
}
]
}
]
},
{
"vendor": "Palo Alto Networks",
"product": "GlobalProtect App",
"defaultStatus": "unaffected",
"platforms": [
"Linux"
],
"versions": [
{
"version": "6.3.0",
"lessThan": "6.3.3-h2 (6.3.3-42)",
"versionType": "custom",
"status": "affected",
"changes": [
{
"at": "6.3.3-h2 (6.3.3-42)",
"status": "unaffected"
}
]
},
{
"version": "6.0.0",
"lessThan": "6.0.11",
"versionType": "custom",
"status": "affected",
"changes": [
{
"at": "6.0.11",
"status": "unaffected"
}
]
}
]
},
{
"vendor": "Palo Alto Networks",
"product": "GlobalProtect App",
"defaultStatus": "unaffected",
"platforms": [
"Windows",
"MacOS"
],
"versions": [
{
"version": "6.0",
"lessThan": "6.0.13",
"versionType": "custom",
"status": "affected",
"changes": [
{
"at": "6.0.13",
"status": "unaffected"
}
]
}
]
},
{
"vendor": "Palo Alto Networks",
"product": "GlobalProtect App",
"defaultStatus": "unaffected",
"platforms": [
"Android",
"Chrome OS"
],
"versions": [
{
"version": "6.0",
"lessThan": "6.0.14",
"versionType": "custom",
"status": "affected",
"changes": [
{
"at": "6.0.14",
"status": "unaffected"
}
]
}
]
},
{
"vendor": "Palo Alto Networks",
"product": "GlobalProtect UWP App",
"defaultStatus": "unaffected",
"platforms": [
"Windows"
],
"versions": [
{
"version": "6.3",
"lessThan": "6.3.3-h10",
"versionType": "custom",
"status": "affected",
"changes": [
{
"at": "6.3.3-h10",
"status": "unaffected"
}
]
}
]
},
{
"vendor": "Palo Alto Networks",
"product": "GlobalProtect App",
"defaultStatus": "unaffected",
"platforms": [
"iOS"
],
"versions": [
{
"version": "All",
"versionType": "custom",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber",
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"attackVector": "ADJACENT",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "UNREPORTED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NO",
"Recovery": "USER",
"valueDensity": "DIFFUSE",
"vulnerabilityResponseEffort": "MODERATE",
"providerUrgency": "AMBER"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.2,
"impactScore": 5.9
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-05-13T00:00:00+00:00",
"id": "CVE-2026-0250",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:linux:*:*",
"versionStartIncluding": "6.0.0",
"versionEndExcluding": "6.0.12",
"matchCriteriaId": "A27BA94F-A5CE-4D05-AAF3-6F1278F3478F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:macos:*:*",
"versionStartIncluding": "6.0.0",
"versionEndExcluding": "6.0.13",
"matchCriteriaId": "821399ED-2A5C-4684-841D-BE489E85FB72"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:windows:*:*",
"versionStartIncluding": "6.0.0",
"versionEndExcluding": "6.0.13",
"matchCriteriaId": "518C5EB1-B8A3-4B05-B727-47EA7B1FE513"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:android:*:*",
"versionStartIncluding": "6.0.0",
"versionEndExcluding": "6.0.15",
"matchCriteriaId": "D8542C50-8CCA-41D4-9CC5-5DC199631340"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:chrome:*:*",
"versionStartIncluding": "6.0.0",
"versionEndExcluding": "6.0.15",
"matchCriteriaId": "6FC98EFE-3179-4EE2-927B-1674DBC1B6BC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:android:*:*",
"versionStartIncluding": "6.1.0",
"versionEndExcluding": "6.1.14",
"matchCriteriaId": "C6CA9D61-7D4D-489F-9640-D88A30F6037A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:chrome:*:*",
"versionStartIncluding": "6.1.0",
"versionEndExcluding": "6.1.14",
"matchCriteriaId": "541408B7-62AB-4A23-AD6B-8EB9298FBD0A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:macos:*:*",
"versionStartIncluding": "6.2.0",
"versionEndExcluding": "6.2.8",
"matchCriteriaId": "84C4C650-DBCF-488A-AD29-84347162D48B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:windows:*:*",
"versionStartIncluding": "6.2.0",
"versionEndExcluding": "6.2.8",
"matchCriteriaId": "98296E39-B40D-4F25-9D0C-C9CACFE25814"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:universal_windows_platform:*:*",
"versionStartIncluding": "6.3.0",
"versionEndExcluding": "6.3.3",
"matchCriteriaId": "3836E3A8-3329-4EA9-AE76-3F1A3A17BC81"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:windows:*:*",
"versionStartIncluding": "6.3.0",
"versionEndExcluding": "6.3.3",
"matchCriteriaId": "3A842EBF-EA01-4D05-96C5-7F2061951423"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:android:*:*",
"versionStartIncluding": "6.3.0",
"versionEndExcluding": "6.3.4",
"matchCriteriaId": "034EDBA0-F7C4-40A3-AC7F-161126A4D74B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:chrome:*:*",
"versionStartIncluding": "6.3.0",
"versionEndExcluding": "6.3.4",
"matchCriteriaId": "D6F2ED5D-CA4D-48DD-8B1A-F08D45061B90"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.2.8:-:*:*:*:macos:*:*",
"matchCriteriaId": "F781BC4A-B907-4393-A94A-D200A0BD73E3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.2.8:-:*:*:*:windows:*:*",
"matchCriteriaId": "95312A9E-9204-451C-85F9-891312FDFAA4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.2.8:h1:*:*:*:macos:*:*",
"matchCriteriaId": "77C49DC4-CC2B-46C3-9122-40B399E657A6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.2.8:h7:*:*:*:macos:*:*",
"matchCriteriaId": "9F6A6D49-B2DE-4359-83B3-D3239559CE64"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.2.8:h7:*:*:*:windows:*:*",
"matchCriteriaId": "CDA02D18-0121-442D-844A-D7B8D70F4853"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:-:*:*:*:linux:*:*",
"matchCriteriaId": "D8495DBE-5B93-495D-9726-E4360942464B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:-:*:*:*:macos:*:*",
"matchCriteriaId": "47AAC03D-0E33-430D-AB58-CABCC1546285"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:-:*:*:*:universal_windows_platform:*:*",
"matchCriteriaId": "0D7A9225-A2BA-4357-8048-A1D2E3047C15"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:-:*:*:*:windows:*:*",
"matchCriteriaId": "8BD47595-78F1-4CD4-AD9A-572C1B128FD4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h1:*:*:*:linux:*:*",
"matchCriteriaId": "E4CF788E-01C0-4D49-9E83-EFD161E9B112"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h1:*:*:*:macos:*:*",
"matchCriteriaId": "1BCA9A56-9AFB-4C97-B597-C3F1DC786A35"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h2:*:*:*:linux:*:*",
"matchCriteriaId": "3E23B006-1A50-4ABA-A173-F784CEE443FD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h2:*:*:*:macos:*:*",
"matchCriteriaId": "D3632AD0-54EB-4CA4-AB41-983B6965B30E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h2:*:*:*:windows:*:*",
"matchCriteriaId": "8868A339-6229-487A-8D16-4B06ECB132AE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h3:*:*:*:macos:*:*",
"matchCriteriaId": "82E3F152-A98F-4B12-B9B7-8F2E3DB8A6A5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h3:*:*:*:windows:*:*",
"matchCriteriaId": "FB1C2ACF-8931-410A-BFE8-2E4DE3D15A0D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h4:*:*:*:macos:*:*",
"matchCriteriaId": "EC0A413D-5F2C-4FE8-ADE6-A78244A7E132"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h4:*:*:*:windows:*:*",
"matchCriteriaId": "2C0EAAFC-5ED3-4D96-A0CE-EDBD4246CD7A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h6:*:*:*:macos:*:*",
"matchCriteriaId": "B7A8F2F7-85C7-4456-9E71-F94F3DF96356"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h6:*:*:*:windows:*:*",
"matchCriteriaId": "7D4FFE1D-5707-4DC4-B783-46AAA5D8D037"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h7:*:*:*:macos:*:*",
"matchCriteriaId": "7472FAD0-A40D-437A-82DA-70A7B959A62C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h7:*:*:*:windows:*:*",
"matchCriteriaId": "AFC6221C-3D39-4F51-86F4-826D7B72D4E5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h8:*:*:*:macos:*:*",
"matchCriteriaId": "B6C0F18B-802C-43D5-AEDD-05B7E5A53CED"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h8:*:*:*:windows:*:*",
"matchCriteriaId": "EC8FBE7C-A3FE-4CBB-947D-F2BA1DB0D39C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h9:*:*:*:universal_windows_platform:*:*",
"matchCriteriaId": "64157CC4-AADA-425B-B26E-C529A973A6DA"
}
]
}
]
}
],
"references": [
{
"url": "https://security.paloaltonetworks.com/CVE-2026-0250",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}