Palo Alto GlobalProtect Improper Certificate Validation Vulnerability (CVE-2026-0296) Advisory

Vulnerability Overview Vulnerability Name: CVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability Vulnerability Description: An improper certificate validation vulnerability in the Palo Alto Networks GlobalProtect™ application allows an unauthenticated attacker to perform a man-in-the-middle (MitM) attack, enabling interception and modification of application communications. VPN tunnel traffic is not affected. Urgency: MODERATE Severity: MEDIUM CVSS Score: 4.5 Affected Versions Affected Versions: - GlobalProtect App 6.3: = 6.3.3-h15 on Linux, >= 6.3.3-h14 (6.3.3-1121) on macOS, >= 6.3.3-h14 (6.3.3-1121) on Windows - GlobalProtect App 6.2: >= 6.2.8-h13 (6.2.8-1045) on macOS, >= 6.2.8-h13 (6.2.8-1045) on Windows - GlobalProtect App 6.0: >= 6.0.15 on Linux, >= 6.0.15 on macOS, >= 6.0.15 on Windows Other Platforms: iOS, Android, and Chrome OS are unaffected. Remediation Upgrade Recommendations: - GlobalProtect App 6.3: Upgrade to version 6.3.3-h15 or later - GlobalProtect App 6.2: Upgrade to version 6.2.8-h13 or later - GlobalProtect App 6.0: Upgrade to version 6.0.15 or later No Action Required: No action is required for iOS, Android, and Chrome OS versions. Additional Information Vulnerability Type: CWE-295 Improper Certificate Validation Attack Vector: ADJACENT Attack Complexity: LOW User Interaction: PASSIVE Privileges Required: NONE Product Integrity: HIGH Product Availability: NONE Publication Date: 2026-08-13 Update Date: 2026-08-13 CPEs cpe:2.3:palo_alto_networks:globalprotect_app:6.3.3:*::Linux: cpe:2.3:palo_alto_networks:globalprotect_app:6.3.2:::Linux: cpe:2.3:palo_alto_networks:globalprotect_app:6.3.1:::Linux: cpe:2.3:palo_alto_networks:globalprotect_app:6.3.0:::Linux: cpe:2.3:palo_alto_networks:globalprotect_app:6.2.9:::Linux: cpe:2.3:palo_alto_networks:globalprotect_app:6.2.8-c82:::Linux: cpe:2.3:palo_alto_networks:globalprotect_app:6.2.8-c48:::Linux: cpe:2.3:palo_alto_networks:globalprotect_app:6.2.8-c10:::Linux: cpe:2.3:palo_alto_networks:globalprotect_app:6.2.8-c471:::Linux: cpe:2.3:palo_alto_networks:globalprotect_app:6.2.8-c431:::Linux: CPE Applicability cpe:2.3:palo_alto_networks:globalprotect_app::::Linux: is vulnerable from (including) 6.3.3 and up to (excluding) 6.3.3-h15 OR cpe:2.3:palo_alto_networks:globalprotect_app::::Linux: is vulnerable from (including) 6.2.0 and up to (excluding) 6.0.15 OR cpe:2.3:palo_alto_networks:globalprotect_app::::macOS: is vulnerable from (including) 6.3.3 and up to (excluding) 6.3.3-h14 OR cpe:2.3:palo_alto_networks:globalprotect_app::::Windows: is vulnerable from (including) 6.3.3 and up to (excluding) 6.3.3-h14 OR cpe:2.3:palo_alto_networks:globalprotect_app::::macOS: is vulnerable from (including) 6.2.8 and up to (excluding) 6.2.8-h13 OR cpe:2.3:palo_alto_networks:globalprotect_app::::Windows: is vulnerable from (including) 6.2.8 and up to (excluding) 6.2.8-h13 OR cpe:2.3:palo_alto_networks:globalprotect_app::::macOS: is vulnerable from (including) 6.0.0 and up to (excluding) 6.0.15 OR cpe:2.3:palo_alto_networks:globalprotect_app::::Windows:* is vulnerable from (including) 6.0.0 and up to (excluding) 6.0.15 Timeline 2026-08-13 Initial Publication.

Goal Reached Thanks to every supporter — we hit 100%!

Palo Alto GlobalProtect Improper Certificate Validation Vulnerability (CVE-2026-0296) Advisory