CVE-2026-0298: Palo Alto Networks Globalprotect

High severity, CVSS 8.1. EPSS: 0.3% chance of exploitation in the next 30 days.

An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on an affected client. The GlobalProtect app on Linux, macOS, iOS, Android, and Chrome OS is not affected.

Affected products

• Palo Alto Networks Globalprotect: from 6.0.0, before 6.0.15 (fixed in 6.0.15); from 6.2.0, before 6.2.8 (fixed in 6.2.8); from 6.3.0, before 6.3.3 (fixed in 6.3.3); version 6.0.15 only; version 6.2.8 only; version 6.3.3 only

Published 2026-08-13. Last modified 2026-09-10.