CVE-2017-15870: Palo Alto Networks Globalprotect

Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days.

Palo Alto Networks GlobalProtect Agent before 4.0.3 allows attackers with administration rights on the local station to gain SYSTEM privileges via vectors involving "image path execution hijacking."

Affected products

• Palo Alto Networks Globalprotect: up to and including 4.0.2

Published 2017-12-11. Last modified 2026-06-17.