Improper Input Handling in GlobalProtect Gateway Enables User Impersonation
CVE-2026-0319 Published on October 14, 2026
PAN-OS: Improper Input Handling Vulnerability
An improper input handling vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user.
Cloud NGFW and Panorama are not affected by this vulnerability.
Vulnerability Analysis
CVE-2026-0319 can be exploited with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.
Timeline
Initial Publication.
Weakness Type
Improper Check for Unusual or Exceptional Conditions
The software does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the software.
Products Associated with CVE-2026-0319
stack.watch emails you whenever new vulnerabilities are published in Palo Alto Networks PAN-OS or Palo Alto Networks Prisma Access. Just hit a watch button to start following.
Affected Versions
Palo Alto Networks Cloud NGFW:- Version All is unaffected.
- Version 12.2.0 and below 12.2.4 is affected.
- Version 12.1.0 and below 12.1.10-h2 is affected.
- Version 11.2.0 and below 11.2.16 is affected.
- Version 11.1.0 and below 11.1.16-h3 is affected.
- Version 10.2.0 and below 10.2.18-h12 is affected.
- Version 12.1.0 and below 12.1.7-h8 is affected.
- Version 11.2.0 and below 11.2.7-h21 is affected.
- Version 10.2.0 and below 10.2.10-h41 is affected.