LOWCVSS v4 2.7Vulnerability

CVE-2026-0328

Authentication bypass vulnerabilities in the GlobalProtect™ portal and gateway of Palo Alto Networks PAN-OS® software enables an unauthenticated user to bypass security restrictions and establish an unauthorized VPN connection. Panorama, Cloud NGFW, and Prisma® Access are not affected by this vulnerability.

Properties

Severity
LOW
Nvd fetched at
2026-11-11T23:49:45.533241+00:00
Cvss severity
LOW
Cvss score
2.7
Retrieved at
2026-11-11T23:50:18+00:00
Score
2.7
Cvss version
4.0
Last source
NVD
Cve id
CVE-2026-0328
Cvss vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber
First seen by Signal
2026-11-11T23:46:41+00:00
Name
CVE-2026-0328
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber
Published at
2026-11-11T20:17:02.577
Last modified
2026-11-11T20:17:02.737

Related Entities (1)

HAS_WEAKNESS (1)

Related research

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-0328 (CVSS v4 2.7) — Ninja Signal Threat Intelligence | Ninja Signal