CVE-2026-0327 · Infrastructure
NO FIX YET
A privilege escalation flaw in the GlobalProtect gateway of PAN-OS lets an authenticated, lower-privileged user take on the privileges and configuration of a higher-privileged user. The attacker must already have a valid login on the gateway.
first public Nov 11, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Organizations running PAN-OS firewalls with the GlobalProtect gateway enabled and users who hold valid lower-privileged accounts on it. Cloud NGFW and Panorama are not affected according to the description. Teams without GlobalProtect gateway in use are likely not exposed.
Not affected if cloud-ngfw, globalprotect-disabled, panorama
Who cares firewall, globalprotect, pan-os, self-hosted
No fix yet, per the sources.
A privilege escalation vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated, lower-privileged user to obtain the privileges and configuration of a higher-privileged user.
Cloud NGFW and Panorama are not affected by this vulnerability.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.