Beveiligingsadvies

CVE-2026-0298

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-13 02:02:47

Laatst bijgewerkt 2026-08-13 13:20:48

Toegewezen door palo_alto

CVSS-score 5.2

Status PUBLISHED

Beschrijving

An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on an affected client. The GlobalProtect app on Linux, macOS, iOS, Android, and Chrome OS is not affected.

← Alle CVE's bekijken Bekijk op cve.org ↗