CVE-2026-0325
Last modified
CVE-2026-0325 is a low-severity vulnerability rated 1.3/10 on the CVSS scale. An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated attacker with valid GlobalProtect credentials to bypass IP address restrictions and circumvent network access controls that rely on source IP filtering. Cloud NGFW is not affected by this vulnerability..
Description
An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated attacker with valid GlobalProtect credentials to bypass IP address restrictions and circumvent network access controls that rely on source IP filtering. Cloud NGFW is not affected by this vulnerability.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Palo Alto Networks | PAN-OS | >= 12.2.0, < 12.2.4-h2; >= 12.1.0, < 12.1.10-h4; >= 11.2.0, < 11.2.16-h2; >= 11.1.0, < 11.1.16-h5 |
| Palo Alto Networks | Prisma Access | >= 12.1.0, < 12.1.10-h4; 11.2.0 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-0325?
How severe is CVE-2026-0325?
How do I fix CVE-2026-0325?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-0319An improper input handling vulnerability in the GlobalProtec…4.9
- CVE-2026-0320A command injection vulnerability in Palo Alto Networks PAN-…6.1
- CVE-2026-0321Denial of service vulnerabilities in Palo Alto Networks PAN-…6.6
- CVE-2026-0322A remote code execution (RCE) vulnerability in the managemen…7.2
- CVE-2026-0323A server-side request forgery vulnerability in Palo Alto Net…1.1
- CVE-2026-0324An incorrect privilege management vulnerability in the OPSWA…5.9
- CVE-2026-0326A buffer overflow vulnerability in Palo Alto Networks PAN-OS…1.7
- CVE-2026-0327A privilege escalation vulnerability in the GlobalProtect ga…2.3
- CVE-2026-0328Authentication bypass vulnerabilities in the GlobalProtect™ …2.7
- CVE-2026-0329A buffer overflow vulnerability in Palo Alto Networks PAN-OS…4.6
- CVE-2026-0330A remote code execution (RCE) vulnerability in Palo Alto Net…6.1
- CVE-2026-0331An information disclosure vulnerability in Palo Alto Network…6.6
Are you affected by CVE-2026-0325?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST