security.paloaltonetworks.com Multiple Vulnerabilities in Palo Alto Networks GlobalProtect App Exposed
Article Content
- •CVE-2026-0251 allows local privilege escalation on Windows, macOS, and Linux.
- •CVE-2026-0249 enables interception of encrypted communications on macOS under specific conditions.
- •Users are urged to upgrade to the latest versions of the GlobalProtect app to mitigate risks.
Palo Alto Networks disclosed two critical vulnerabilities in their GlobalProtect app. CVE-2026-0251, published on 2026-05-13, allows local privilege escalation on Windows, macOS, and Linux, enabling non-administrative users to execute commands with elevated privileges. CVE-2026-0249, reported on 2026-05-14, involves improper certificate validation that could allow attackers to intercept encrypted communications. The vulnerabilities affect various versions of the GlobalProtect app, with specific upgrade recommendations provided. No malicious exploitation has been reported for either vulnerability. Users of the GlobalProtect app on iOS, Android, and Chrome OS are not affected by these issues. Immediate action is advised for affected systems to mitigate potential risks.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track CVE-2026-0251 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…