{"id":"CVE-2026-0325","aliases":["EUVD-2026-123797","GHSA-qj6h-xv6f-fhv4"],"status":"published","title":"PAN-OS: GlobalProtect Authorization Bypass Vulnerability","description":"An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated attacker with valid GlobalProtect credentials to bypass IP address restrictions and circumvent network access controls that rely on source IP filtering.\n\nCloud NGFW is not affected by this vulnerability.","severity":{"version":"4.0","score":1.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U/AU:N/R:A/V:D/RE:M/U:Amber","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-14","score":0.00356,"percentile":0.29832,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-940"],"published":"2026-11-11T19:51:55Z","modified":"2026-11-11T21:33:09Z","products":[{"vendor":"palo alto networks","product":"cloud ngfw"},{"vendor":"palo alto networks","product":"pan-os"},{"vendor":"palo alto networks","product":"prisma access"}],"references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0325","tags":["vendor-advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0325"},{"url":"https://github.com/advisories/GHSA-qj6h-xv6f-fhv4"}],"sources":{"cve":[{"id":"CVE-2026-0325","title":"PAN-OS: GlobalProtect Authorization Bypass Vulnerability","description":"An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated attacker with valid GlobalProtect credentials to bypass IP address restrictions and circumvent network access controls that rely on source IP filtering.\n\nCloud NGFW is not affected by this vulnerability.","status":"published","published":"2026-11-11T19:51:55.386Z","modified":"2026-11-13T19:35:48.821Z","cvss":[{"version":"4.0","score":1.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U/AU:N/R:A/V:D/RE:M/U:Amber","level":"low","assessor":"cna"}],"cwes":["CWE-940"],"updated_at":"2026-11-11T21:33:01.800627Z"}],"euvd":[{"id":"EUVD-2026-123797","description":"An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated attacker with valid GlobalProtect credentials to bypass IP address restrictions and circumvent network access controls that rely on source IP filtering.\n\nCloud NGFW is not affected by this vulnerability.","status":"published","published":"2026-11-11T19:51:55Z","modified":"2026-11-13T19:35:48Z","cvss":[{"version":"4.0","score":1.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U/AU:N/R:A/V:D/RE:M/U:Amber","level":"low"}],"updated_at":"2026-11-11T23:30:57.284312Z"}],"ghsa":[{"id":"GHSA-qj6h-xv6f-fhv4","title":"An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS®...","description":"An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated attacker with valid GlobalProtect credentials to bypass IP address restrictions and circumvent network access controls that rely on source IP filtering.\n\nCloud NGFW is not affected by this vulnerability.","status":"published","published":"2026-11-11T21:32:59Z","modified":"2026-11-11T21:33:09Z","cvss":[{"version":"4.0","score":1.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:D/RE:M/U:Amber","level":"low"}],"cwes":["CWE-940"],"updated_at":"2026-11-11T21:36:29.153415Z"}],"nvd":[{"id":"CVE-2026-0325","description":"An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated attacker with valid GlobalProtect credentials to bypass IP address restrictions and circumvent network access controls that rely on source IP filtering.\n\nCloud NGFW is not affected by this vulnerability.","status":"published","published":"2026-11-11T20:17:01.563Z","modified":"2026-11-13T20:17:32.503Z","cvss":[{"version":"4.0","score":1.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:D/RE:M/U:Amber","level":"low","assessor":"secondary"}],"cwes":["CWE-940"],"updated_at":"2026-11-11T21:26:20.111639Z"}]}}