{"id":"CVE-2026-0319","title":"An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user","summary":"An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user. \n\nCloud NGFW and Panorama…","severity":"medium","cvss":4.9,"cvssVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber","cwe":["CWE-754"],"vendor":"Palo Alto Networks","product":"Cloud NGFW","affected":["cloud_ngfw","PAN-OS >= 12.2.0 < 12.2.4","PAN-OS >= 12.1.0 < 12.1.10-h2","PAN-OS >= 11.2.0 < 11.2.16","PAN-OS >= 11.1.0 < 11.1.16-h3","PAN-OS >= 10.2.0 < 10.2.18-h12","prisma_access >= 12.1.0 < 12.1.7-h8","prisma_access >= 11.2.0 < 11.2.7-h21","prisma_access >= 10.2.0 < 10.2.10-h41"],"published":"2026-10-14","updated":"2026-10-15","sourceUpdated":"2026-10-15T19:17:12.327","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-0319","references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0319","label":"psirt@paloaltonetworks.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-15T18:48:44.598382Z"},"cvssSource":"cna","ingestedAt":"2026-10-14T21:57:04.817Z","epss":0.00279,"epssPercentile":0.20183,"slug":"CVE-2026-0319","body":"## Overview\n\nAn improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user. \n\nCloud NGFW and Panorama are not affected by this vulnerability.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":27,"depthScoreParts":{"impact":27,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":221914,"id":"CVE-2026-0319","ts":1792035907013,"field":"cvss","old":null,"new":"4.9"},{"seq":221913,"id":"CVE-2026-0319","ts":1792035907013,"field":"severity","old":"none","new":"medium"}]}