PatchTheCEVglobalprotect vulnerabilities and fixes
Recent CVEs affecting globalprotect, with upgrade or downgrade steps. 5 tracked.
globalprotect has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-08-13. Highest priority: CVE-2026-0298 (score 40/100).
- CVE-2026-0298 HIGH 8.1 UPGRADE An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of
- CVE-2026-0297 HIGH 8.1 UPGRADE UPGRADE A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man-in-the-
- CVE-2026-0296 HIGH 7.4 UPGRADE UPGRADE Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthentic
- CVE-2026-0299 HIGH 7.8 UPGRADE UPGRADE Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to
- CVE-2026-0295 HIGH 7.0 UPGRADE A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-
FAQ
How do I fix globalprotect vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is globalprotect being exploited right now?
None of the tracked globalprotect CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which globalprotect CVE should I patch first?
CVE-2026-0298 currently ranks highest (40/100): An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of.