LOWCVSS v4 1.3Vulnerability
CVE-2026-0325
An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated attacker with valid GlobalProtect credentials to bypass IP address restrictions and circumvent network access controls that rely on source IP filtering. Cloud NGFW is not affected by this vulnerability.
Properties
- Severity
- LOW
- Nvd fetched at
- 2026-11-11T23:49:45.533241+00:00
- Cvss severity
- LOW
- Cvss score
- 1.3
- Retrieved at
- 2026-11-11T23:50:18+00:00
- Score
- 1.3
- Cvss version
- 4.0
- Last source
- NVD
- Cve id
- CVE-2026-0325
- Cvss vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:D/RE:M/U:Amber
- First seen by Signal
- 2026-11-11T23:46:41+00:00
- Name
- CVE-2026-0325
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:D/RE:M/U:Amber
- Published at
- 2026-11-11T20:17:01.563
- Last modified
- 2026-11-11T20:17:01.720
Related Entities (1)
HAS_WEAKNESS (1)
Related research
Explore deeper with Ninja Signal's threat intelligence graph