CVE-2026-0327

CVSS 2.3 (low) · published 2026-11-11

A privilege escalation vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated, lower-privileged user to obtain the privileges and configuration of a higher-privileged user. Cloud NGFW and Panorama are not affected by this vulnerability.

Weakness: CWE-426

Source: NVD CVE-2026-0327

References

• https://security.paloaltonetworks.com/CVE-2026-0327

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.