How many Palo Alto Networks globalprotect CVEs are in CISA KEV?

None of Palo Alto Networks globalprotect's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Palo Alto Networks globalprotect are affected?

140 distinct Palo Alto Networks globalprotect versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Palo Alto Networks globalprotect CVEs?

Palo Alto Networks globalprotect's CVEs most often map to these CWE weakness types: CWE-295 (Improper Certificate Validation), CWE-532 (Insertion of Sensitive Information into Log File), CWE-266 (Incorrect Privilege Assignment), CWE-269 (Improper Privilege Management).

What is the average severity of Palo Alto Networks globalprotect CVEs?

The average CVSS base score across Palo Alto Networks globalprotect's scored CVEs is 6.0.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Palo Alto Networks

38 CVEs

Palo Alto Networks globalprotect Vulnerabilities

Name: Palo Alto Networks globalprotect vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for globalprotect by Palo Alto Networks.

38

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

2

Public exploits

PoC or exploit code

6.0

Avg CVSS

2013–2026

Last updated June 10, 2026

Overview

Palo Alto Networks globalprotect has 38 published CVE records since 2013, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 6.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Palo Alto Networks globalprotect, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include Mac OS, linux kernel, macos, windows.

Severity and exploitation

How the CVSS severity of Palo Alto Networks globalprotect's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High12

Medium23

Low3

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Palo Alto Networks globalprotect's CVEs are currently listed in CISA's KEV catalog.

Public exploits

2

2 of Palo Alto Networks globalprotect's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Palo Alto Networks globalprotect version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

5.11 CVE
5.1.01 CVE
6.01 CVE
6.0.01 CVE
6.1.01 CVE
6.3.01 CVE

Version ranges

6.3.0 <= v < 6.3.39 CVEs
6.2.0 <= v < 6.2.84 CVEs
6.2.8 <= v <= 6.2.84 CVEs
6.3.3 <= v <= 6.3.34 CVEs
5.1 <= v < 5.1.103 CVEs
5.1 <= v < 5.1.123 CVEs
5.1.0 <= v < 5.1.123 CVEs
5.2 <= v < 5.2.93 CVEs
6.0.0 <= v < 6.0.133 CVEs
6.0.0 <= v < 6.2.83 CVEs
6.1.0 <= v <= 6.1.03 CVEs
<= 4.1.122 CVEs
5.0.0 <= v < 5.0.102 CVEs
5.1 <= v < 5.1.12 CVEs
5.1.0 <= v < 5.1.42 CVEs
5.2.0 <= v < 5.2.132 CVEs
6.0 <= v < 6.0.82 CVEs
6.0.0 <= v < 6.0.112 CVEs
6.0.0 <= v < 6.0.122 CVEs
6.0.0 <= v < 6.0.42 CVEs
6.0.0 <= v < 6.0.82 CVEs
6.1.0 <= v < 6.1.142 CVEs
6.1.0 <= v < 6.1.22 CVEs
6.1.0 <= v < 6.1.62 CVEs
6.2.0 <= v < 6.2.52 CVEs
6.2.0 <= v <= 6.2.02 CVEs
6.3.0 <= v <= 6.3.02 CVEs
< 5.2.131 CVE
<= 1.1.61 CVE
<= 4.0.21 CVE
<= 4.1.01 CVE
<= 4.1.101 CVE
<= 5.0.31 CVE
<= 5.0.41 CVE
>= 5.0.61 CVE
>= 6.2.01 CVE
4.1.0 <= v < 4.1.131 CVE
5.0 <= v < 5.0.81 CVE
5.0 <= v < 5.0.91 CVE
5.0 <= v <= 5.01 CVE
5.0 <= v <= 5.0.101 CVE
5.0 <= v <= 5.0.51 CVE
5.0 <= v <= 5.0.81 CVE
5.0 <= v <= 5.0.91 CVE
5.0.0 <= v < 5.0.51 CVE
5.0.0 <= v < 5.0.91 CVE
5.1 <= v < 5.1.91 CVE
5.1 <= v < 6.2.51 CVE
5.1 <= v <= 5.1.11 CVE
5.1.0 <= v < 5.1.21 CVE
5.1.0 <= v < 5.1.81 CVE
5.1.0 <= v <= 5.1.41 CVE
5.1.0 <= v <= 5.1.91 CVE
5.2 <= v < 5.2.131 CVE
5.2 <= v < 5.2.51 CVE
5.2 <= v < 5.2.81 CVE
5.2 <= v <= 5.2.71 CVE
5.2.0 <= v < 5.2.41 CVE
5.2.0 <= v <= 5.2.131 CVE
5.3 <= v < 5.3.11 CVE
5.3 <= v < 5.3.21 CVE
6.0.0 <= v < 6.0.141 CVE
6.0.0 <= v < 6.0.151 CVE
6.0.0 <= v < 6.0.51 CVE
6.0.0 <= v < 6.0.71 CVE
6.0.0 <= v <= 6.0.61 CVE
6.1 <= v < 6.1.21 CVE
6.1 <= v < 6.1.31 CVE
6.1 <= v < 6.1.51 CVE
6.1.0 <= v < 6.1.11 CVE
6.1.0 <= v < 6.1.31 CVE
6.1.0 <= v < 6.1.51 CVE
6.1.0 <= v < 6.1.71 CVE
6.1.0 <= v < 6.2.11 CVE
6.1.0 <= v < 6.2.61 CVE
6.1.0 <= v < 6.2.7-10771 CVE
6.2 <= v < 6.2.11 CVE
6.2 <= v < 6.2.31 CVE
6.2 <= v < 6.2.41 CVE
6.2.0 <= v < 6.2.31 CVE
6.2.0 <= v < 6.2.41 CVE
6.3 <= v < 6.3.11 CVE
6.3.0 <= v < 6.3.21 CVE
6.3.0 <= v < 6.3.41 CVE
6.3.1 <= v <= 6.3.11 CVE

Fixed in

6.3.39 CVEs
6.2.87 CVEs
5.1.124 CVEs
5.2.134 CVEs
5.1.103 CVEs
5.2.93 CVEs
6.0.133 CVEs
5.0.102 CVEs
5.0.92 CVEs
5.1.12 CVEs
5.1.42 CVEs
6.0.112 CVEs
6.0.122 CVEs
6.0.42 CVEs

Find a version

38 CVEs

Sort

GlobalProtect App: Information Exposure Vulnerability on macOS
CVE-2026-0267
Patch
Workaround
CWE-532
Medium · CVSS 4.4
EPSS 0.1% (1th pct)2026-06-10
GlobalProtect App: Certificate Validation Bypass Vulnerabilities
CVE-2026-0249
Patch
CWE-295
Medium · CVSS 4.9
EPSS 0.1% (2th pct)2026-05-13
GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway
CVE-2026-0250
Patch
CWE-787
Medium · CVSS 5.2
EPSS 0.4% (31th pct)2026-05-13
GlobalProtect App: Local Privilege Escalation Vulnerabilities
CVE-2026-0251
Patch
CWE-426
Medium · CVSS 5.9
EPSS 0.2% (5th pct)2026-05-13
GlobalProtect App: Interception in Endpoint Traffic Policy Enforcement
CVE-2025-4227
Patch
Workaround
CWE-319
Low · CVSS 1.0
EPSS 0.1% (3th pct)2025-06-13
GlobalProtect: Authenticated Code Injection Through Wildcard on macOS
CVE-2025-4232
Patch
CWE-155
High · CVSS 8.5
EPSS 0.4% (35th pct)2025-06-12
GlobalProtect App on macOS: Non Admin User Can Disable the GlobalProtect App
CVE-2025-0135
Patch
CWE-266
Medium · CVSS 5.2
EPSS 0.1% (2th pct)2025-05-14
GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
CVE-2025-0120
Patch
CWE-250
High · CVSS 7.1
EPSS 0.2% (5th pct)2025-04-11
GlobalProtect App: Execution of Unsafe ActiveX Control Vulnerability
CVE-2025-0118
Patch
Workaround
CWE-618
Medium · CVSS 6.0
EPSS 0.4% (34th pct)2025-03-12
GlobalProtect App: Insufficient Certificate Validation Leads to Privilege Escalation
CVE-2024-5921
Public exploit
Patch
Workaround
CWE-295
High · CVSS 7.1
EPSS 1.5% (71th pct)2024-11-27
Medium vulnerability · 2024-10-09
CVE-2024-9473
Public exploit
Patch
CWE-250
Medium · CVSS 5.2
EPSS 0.3% (21th pct)2024-10-09
PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes
CVE-2024-8687
Patch
Workaround
CWE-497
Medium · CVSS 6.9
EPSS 0.4% (33th pct)2024-09-11
GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
CVE-2024-5915
Patch
CWE-732
Medium · CVSS 5.2
EPSS 0.2% (11th pct)2024-08-14
Medium vulnerability · 2024-06-12
CVE-2024-5908
Patch
CWE-532
Medium · CVSS 5.5
EPSS 0.4% (29th pct)2024-06-12
DHCP routing options can manipulate interface-based VPN traffic
CVE-2024-3661
Patch
CWE-306
High · CVSS 7.6
EPSS 4.1% (90th pct)2024-05-06
High vulnerability · 2024-03-13
CVE-2024-2432
Patch
CWE-269
High · CVSS 7.0
EPSS 0.4% (31th pct)2024-03-13
Medium vulnerability · 2024-03-13
CVE-2024-2431
Patch
Workaround
CWE-269
Medium · CVSS 5.5
EPSS 0.2% (5th pct)2024-03-13
High vulnerability · 2023-06-14
CVE-2023-0009
Patch
CWE-807
High · CVSS 7.8
EPSS 0.2% (8th pct)2023-06-14
GlobalProtect App: Local File Deletion Vulnerability
CVE-2023-0006
Patch
CWE-367
Medium · CVSS 6.3
EPSS 0.1% (2th pct)2023-04-12
Medium vulnerability · 2022-02-10
CVE-2022-0021
Patch
CWE-532
Medium · CVSS 5.5
EPSS 0.2% (13th pct)2022-02-10
GlobalProtect App: Insufficiently Protected Credentials Vulnerability on Linux
CVE-2022-0019
Patch
Workaround
CWE-522
Medium · CVSS 5.5
EPSS 0.2% (6th pct)2022-02-10
GlobalProtect App: Information Exposure Vulnerability When Connecting to GlobalProtect Portal With Single Sign-On Enabled
CVE-2022-0018
Patch
CWE-201
Medium · CVSS 6.5
EPSS 0.7% (51th pct)2022-02-10
High vulnerability · 2022-02-10
CVE-2022-0017
Patch
CWE-59
High · CVSS 7.8
EPSS 0.3% (20th pct)2022-02-10
GlobalProtect App: Privilege Escalation Vulnerability When Using Connect Before Logon
CVE-2022-0016
Patch
CWE-703
High · CVSS 7.8
EPSS 0.2% (11th pct)2022-02-10
High vulnerability · 2021-10-13
CVE-2021-3057
Patch
CWE-121
High · CVSS 8.1
EPSS 1.4% (69th pct)2021-10-13
Medium vulnerability · 2021-04-20
CVE-2021-3038
Patch
CWE-20
Medium · CVSS 5.5
EPSS 0.2% (12th pct)2021-04-20
Medium vulnerability · 2020-06-10
CVE-2020-2033
Patch
Workaround
CWE-295
Medium · CVSS 5.3
EPSS 0.8% (51th pct)2020-06-10
High vulnerability · 2020-06-10
CVE-2020-2032
Patch
CWE-367
High · CVSS 7.0
EPSS 0.2% (11th pct)2020-06-10
Medium vulnerability · 2020-05-13
CVE-2020-2004
Patch
Workaround
CWE-534
Medium · CVSS 6.8
EPSS 0.3% (22th pct)2020-05-13
High vulnerability · 2020-04-08
CVE-2020-1989
Patch
Workaround
CWE-266
High · CVSS 7.8
EPSS 0.3% (18th pct)2020-04-08

Showing 30 of 38

Common weakness types

The CWE weakness categories most often found in Palo Alto Networks globalprotect CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Palo Alto Networks globalprotect CVEs were published each year.

2013

1

2017

1

2019

3

2020

7

2021

2

2022

5

2023

2

2024

8

2025

5

2026

4

Other Palo Alto Networks products

Browse vulnerabilities for other products by Palo Alto Networks.

PAN-OS257 CVEs Prisma Access112 CVEs Cloud NGFW103 CVEs GlobalProtect App33 CVEs Cortex XDR Agent24 CVEs Expedition17 CVEs Cortex XSOAR12 CVEs GlobalProtect UWP App9 CVEs

All Palo Alto Networks vulnerabilities

Frequently asked questions

Common questions about Palo Alto Networks globalprotect vulnerabilities.

How many CVEs does Palo Alto Networks globalprotect have?: Palo Alto Networks globalprotect has 38 published CVE records since 2013.
How many Palo Alto Networks globalprotect CVEs are in CISA KEV?: None of Palo Alto Networks globalprotect's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Palo Alto Networks globalprotect vulnerabilities?: Yes — 2 of Palo Alto Networks globalprotect's CVEs have a known public exploit.
Which versions of Palo Alto Networks globalprotect are affected?: 140 distinct Palo Alto Networks globalprotect versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Palo Alto Networks globalprotect CVEs?: Palo Alto Networks globalprotect's CVEs most often map to these CWE weakness types: CWE-295 (Improper Certificate Validation), CWE-532 (Insertion of Sensitive Information into Log File), CWE-266 (Incorrect Privilege Assignment), CWE-269 (Improper Privilege Management).
What is the average severity of Palo Alto Networks globalprotect CVEs?: The average CVSS base score across Palo Alto Networks globalprotect's scored CVEs is 6.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Palo Alto Networks globalprotect vulnerabilities

Monitor new Palo Alto Networks globalprotect vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

6.0.8

2 CVEs

6.1.142 CVEs

6.1.22 CVEs

6.1.62 CVEs

6.2.12 CVEs

6.2.52 CVEs

> 5.0.51 CVE

4.1.131 CVE

5.0.51 CVE

5.0.61 CVE

5.0.81 CVE

5.1.21 CVE

5.1.81 CVE

5.1.91 CVE

5.2.41 CVE

5.2.51 CVE

5.2.81 CVE

5.3.11 CVE

5.3.21 CVE

6.0.141 CVE

6.0.151 CVE

6.0.51 CVE

6.0.71 CVE

6.1.11 CVE

6.1.31 CVE

6.1.51 CVE

6.1.71 CVE

6.2.01 CVE

6.2.31 CVE

6.2.41 CVE

6.2.61 CVE

6.2.7-10771 CVE

6.3.11 CVE

6.3.21 CVE

6.3.41 CVE