CVE-2026-0298
An attacker can exploit multiple vulnerabilities in Palo Alto Networks GlobalProtect App to gain administrator privileges, execute arbitrary code with administrator privileges, bypass security measures, manipulate and disclose data as well as trigger a Denial-of-Service condition.
CSIRTS triage
- What
- Multiple vulnerabilities in GlobalProtect App allow attackers to gain administrator privileges, execute arbitrary code, bypass security measures, and cause denial of service.
- Who is affected
- GlobalProtect App deployments of unspecified versions are affected.
- Urgency
- High urgency; privilege escalation and code execution capabilities pose critical risk to endpoint security.
- Action
- Update GlobalProtect App to a version patching CVE-2026-0295 through CVE-2026-0299 immediately.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch CVE-2026-0298
Get an email if CVE-2026-0298 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.
Exploitation outlook
- Low exploitation risk0.19% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 9% of all EPSS-scored CVEs.
Advisory coverage (4)
- unknownPalo Alto Products Multiple Vulnerabilitieshkcert · 2026-08-14
- high[NEW] [high] Palo Alto Networks GlobalProtect App: Multiple vulnerabilitiescert-bund · 2026-08-13
- unknownCVE-2026-0298: An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLA…nvd · 2026-08-13
- mediumCVE-2026-0298 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) (Sev…paloalto · 2026-08-12
External references
Embed the live status
— this badge updates automatically when the KEV or exploit status changes. How to embed it →
[](https://www.csirts.com/cve/CVE-2026-0298)