PT-2026-48528 · Palo Alto Networks · Globalprotect App+1

Published 2026-06-10 · Updated 2026-06-10 · CVE-2026-0267

Mitre

CVSS v4.0

4.4

Medium

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/AU:N/R:A/V:D/RE:M/U:Amber

An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for disabling, disconnecting, or uninstalling the GlobalProtect app. After the passcode is known, the user can perform these actions even if the GlobalProtect app configuration would not normally permit them to do so.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2026-0267

Affected Products

Globalprotect App

Globalprotect Uwp App

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-0267 · Security Note
• https://security.paloaltonetworks.com/CVE-2026-0267 · Vendor Advisory
• https://security.paloaltonetworks.com/CVE-2024-8687 · Note