CVE-2026-0295
An attacker can exploit multiple vulnerabilities in Palo Alto Networks GlobalProtect App to gain administrator privileges, execute arbitrary code with administrator privileges, bypass security measures, manipulate and disclose data as well as trigger a Denial-of-Service condition.
CSIRTS triage
- What
- Multiple vulnerabilities in GlobalProtect App allow attackers to gain administrator privileges, execute arbitrary code, bypass security measures, and cause denial of service.
- Who is affected
- GlobalProtect App deployments of unspecified versions are affected.
- Urgency
- High urgency; privilege escalation and code execution capabilities pose critical risk to endpoint security.
- Action
- Update GlobalProtect App to a version patching CVE-2026-0295 through CVE-2026-0299 immediately.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch CVE-2026-0295
Get an email if CVE-2026-0295 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.
Exploitation outlook
- Low exploitation risk0.08% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 0% of all EPSS-scored CVEs.
Advisory coverage (5)
- unknownPalo Alto Products Multiple Vulnerabilitieshkcert · 2026-08-14
- high[NEW] [high] Palo Alto Networks GlobalProtect App: Multiple vulnerabilitiescert-bund · 2026-08-13
- unknownCVE-2026-0295: A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally aut…nvd · 2026-08-13
- unknownMultiple vulnerabilities in Palo Alto Networks products (August 13, 2026)cert-fr-avis · 2026-08-13
- mediumCVE-2026-0295 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS (Severity: MEDIUM)paloalto · 2026-08-12
External references
Embed the live status
— this badge updates automatically when the KEV or exploit status changes. How to embed it →
[](https://www.csirts.com/cve/CVE-2026-0295)