CVE-2026-0327: Privilege Escalation Vulnerability in Palo Alto Networks PAN-OS GlobalProtect
CVE-2026-0327 is a privilege escalation vulnerability affecting Palo Alto Networks PAN-OS, specifically within the GlobalProtect functionality. The impacted versions include a broad range from 11.1.0 up to 12.2.4 with various patch levels. This vulnerability could potentially allow a user with limited privileges to obtain higher-level access, posing an operational risk if exploited. Palo Alto Networks has published detailed affected version lists covering multiple minor releases, indicating the widespread nature of the issue across PAN-OS versions. No public reports of active exploitation or additional technical details were provided in the initial advisory.
Entenda a falha
A vulnerabilidade
CVE-2026-0327 is a privilege escalation flaw in the GlobalProtect functionality of Palo Alto Networks PAN-OS. The advisory lists affected versions from 11.1.0 through 12.2.4, covering the 11.1, 11.2, 12.1 and 12.2 branches with several hotfix levels. The story says a user with limited privileges could obtain higher-level access. The articles do not state the exact attacker prerequisites (network reach, authentication, configuration) or the fixed versions.
Como funciona
The articles do not describe how the vulnerable process works. They only say the issue sits in GlobalProtect and lets a limited-privilege user gain higher access.
Por que é vulnerável
The root cause is not disclosed in the available material. The advisory content provided lists only affected versions and gives no explanation of the underlying weakness or of what the fix changes.
Como foi descoberta
The articles do not say how the flaw was found or who reported it. The only disclosure channel mentioned is the Palo Alto Networks security advisory, and the story notes no public reports of active exploitation.
Explicação gerada por IA a partir da matéria e dos artigos, em 11/11/2026 14:17.
Linha do tempo
-
CVE-2026-0327: Privilege Escalation Vulnerability in Palo Alto Networks PAN-OS GlobalProtect
ler a análise desta fonte ocultar
CVE-2026-0327 is a privilege escalation vulnerability affecting Palo Alto Networks PAN-OS, specifically within the GlobalProtect functionality. The impacted versions include a broad range from 11.1.0 up to 12.2.4 with various patch levels. This vulnerability could potentially allow a user with limited privileges to obtain higher-level access, posing an operational risk if exploited. Palo Alto Networks has published detailed affected version lists covering multiple minor releases, indicating the widespread nature of the issue across PAN-OS versions. No public reports of active exploitation or additional technical details were provided in the initial advisory.