PALO ALTO: 📅 Published on May 28, 2026

PALO ALTO Security Advisory

Published Date: May 28, 2026

CVE: CVE-2026-0249

Advisory Summary

❗️ Security Alert: Medium Severity Vulnerability in GlobalProtect App Certificate Validation

Palo Alto Networks has disclosed a medium severity vulnerability identified as CVE-2026-0249 in their GlobalProtect application. This flaw allows an attacker to bypass certificate validation mechanisms, which could potentially enable unauthorized access or facilitate man-in-the-middle attacks by tricking the app into accepting malicious certificates. Given the critical role GlobalProtect plays in securing remote access for enterprise environments, this vulnerability requires prompt attention from IT security teams.

Users of the GlobalProtect App are strongly advised to apply the security patches provided by Palo Alto Networks without delay to mitigate the risk. Regular review of certificate validation processes and monitoring for anomalous activity is also recommended until the update is applied.

Stay vigilant and ensure your remote access infrastructure remains protected against this bypass vulnerability.

Reference: Vendor Advisory