CVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability (Severity: MEDIUM)

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Sep 12, 2026 · Palo Alto Networks

   Detected

   CVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability (Severity: MEDIUM)

Sources

• CVE.orgVulnerability recordCVE-2026-0296

  Official CVE identifier

  cve.org
• Palo Alto NetworksVendor advisoryCVE-2026-0296
  security.paloaltonetworks.com