CVEFinder.io

CVE-2026-0251

⚠️ high
🔍 Scan for this CVE
Summary

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.

CVSS Score
7.8
High
EPSS Score
0.2
Exploit Probability
Published Date
2026-05-13
First Seen: 2026-05-17
📊 Relative Risk Intelligence

This CVE is Moderate Risk - more severe than 68.9% of all 344,912 vulnerabilities in our database.

#107,412
Above average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: May 13, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Total
Complete system compromise possible
🏆 Discovered By
Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue. (other)
SSVC data provided by CISA
Last Modified 2026-07-14
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Vector 4.0 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber
CWE IDs (Weakness Types)

📦 Affected Products 6

🔗 References 1

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-0267 🔶 medium 5.5 0.1 An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn... 2026-06-10
CVE-2026-0249 🔶 medium 6.5 0.1 Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attac... 2026-05-13
CVE-2026-0250 ⚠️ high 8.1 0.4 A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle a... 2026-05-13
CVE-2025-4232 ⚠️ high 8.8 0.1 2025-06-13
CVE-2025-4227 ℹ️ low 3.5 0.0 An improper access control vulnerability in the Endpoint Traffic Policy Enforcement https://docs.paloaltonetworks.com/g... 2025-06-13
CVE-2025-0135 ℹ️ low 3.3 0.0 An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables ... 2025-05-14
These CVEs affect the same products