MSRXVulnerabilities / CVE-2026-0267
CVE-2026-0267
Published 2026-06-10 · Analyzed
CVE-2026-0267
GlobalProtect App: Information Exposure Vulnerability on macOS
4.4 MEDIUM
CVSS 4.0 · CNA · paloaltonetworks.com
CVSS 4.0 · CNA · paloaltonetworks.com
0.1%
chance of exploitation in the next 30 days (EPSS; higher than 1% of CVEs)
chance of exploitation in the next 30 days (EPSS; higher than 1% of CVEs)
An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for disabling, disconnecting, or uninstalling the GlobalProtect app. After the passcode is known, the user can perform these actions even if the GlobalProtect app configuration would not normally permit them to do so.
Scores
4.4CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/AU:N/R:A/V:D/RE:M/U:AmberCNA · paloaltonetworks.com
Affected products
- paloaltonetworks globalprotect: ≥ 6.2.0, < 6.2.8; ≥ 6.3.0, < 6.3.3; 6.2.8; 6.2.8 h1; 6.3.3
Weakness: CWE-532
2 references (advisories, patches, write-ups)
- https://security.paloaltonetworks.com/CVE-2024-8687 · Not Applicable
- https://security.paloaltonetworks.com/CVE-2026-0267 · Vendor Advisory, Mitigation
Sources: NVD, CVE.org, FIRST EPSS. Missing ones did not answer or have no record yet.