{"id":"CVE-2026-0319","title":"An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user","summary":"An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user. \n\nCloud NGFW and Panorama…","severity":"none","cwe":["CWE-754"],"published":"2026-10-14","updated":"2026-10-14","sourceUpdated":"2026-10-14T21:17:19.550","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-0319","references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0319","label":"psirt@paloaltonetworks.com"}],"tags":["nvd"],"ingestedAt":"2026-10-14T21:57:04.817Z","slug":"CVE-2026-0319","body":"## Overview\n\nAn improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user. \n\nCloud NGFW and Panorama are not affected by this vulnerability.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}