{"document":{"category":"csaf_vex","csaf_version":"2.1","notes":[{"category":"summary","text":"Palo Alto Networks PSIRT provided VEX document. This document is autogenerated.","title":"PAN-OS: GlobalProtect Authorization Bypass Vulnerability"}],"publisher":{"category":"vendor","name":"Palo Alto Networks","namespace":"https://security.paloaltonetworks.com"},"title":"Palo Alto Networks PSIRT provided VEX document: CVE-2026-0325","distribution":{"text":"Copyright © 2024 Palo Alto Networks. All rights reserved.","tlp":{"label":"CLEAR","url":"https://www.first.org/tlp/"}},"tracking":{"current_release_date":"2026-11-11T17:00:58.591Z","generator":{"date":"2026-11-11T17:00:58.591Z","engine":{"name":"Vulnogram","version":"0.1.0-dev"}},"id":"CVE-2026-0325","initial_release_date":"2026-11-11T17:00:00.000Z","revision_history":[{"number":"1","date":"2026-11-11T09:00:00.000Z","summary":"Initial publication"}],"status":"final","version":"1"}},"product_tree":{"branches":[{"name":"Palo Alto Networks","category":"vendor","branches":[{"name":"Cloud NGFW","category":"product_name","branches":[{"category":"product_version","name":"Cloud NGFW All","product":{"name":"Palo Alto Networks Cloud NGFW","product_id":"PANW-Cloud-NGFW-1"}}]},{"name":"PAN-OS","category":"product_name","branches":[{"category":"product_version_range","name":"vers:generic/PAN-OS<12.2.4-h2","product":{"name":"Palo Alto Networks PAN-OS","product_id":"PANW-PAN-OS-957"}},{"category":"product_version_range","name":"vers:generic/PAN-OS>=12.2.4-h2","product":{"name":"Palo Alto Networks PAN-OS","product_id":"PANW-PAN-OS-957"}},{"category":"product_version_range","name":"vers:generic/PAN-OS<12.1.10-h4","product":{"name":"Palo Alto Networks PAN-OS","product_id":"PANW-PAN-OS-958"}},{"category":"product_version_range","name":"vers:generic/PAN-OS>=12.1.10-h4","product":{"name":"Palo Alto Networks PAN-OS","product_id":"PANW-PAN-OS-958"}},{"category":"product_version_range","name":"vers:generic/PAN-OS<11.2.16-h2","product":{"name":"Palo Alto Networks PAN-OS","product_id":"PANW-PAN-OS-959"}},{"category":"product_version_range","name":"vers:generic/PAN-OS>=11.2.16-h2","product":{"name":"Palo Alto Networks PAN-OS","product_id":"PANW-PAN-OS-959"}},{"category":"product_version_range","name":"vers:generic/PAN-OS<11.1.16-h5","product":{"name":"Palo Alto Networks PAN-OS","product_id":"PANW-PAN-OS-960"}},{"category":"product_version_range","name":"vers:generic/PAN-OS>=11.1.16-h5","product":{"name":"Palo Alto Networks PAN-OS","product_id":"PANW-PAN-OS-960"}}]},{"name":"Prisma Access","category":"product_name","branches":[{"category":"product_version_range","name":"vers:generic/Prisma Access<12.1.10-h4","product":{"name":"Palo Alto Networks Prisma Access","product_id":"PANW-Prisma-Access-68"}},{"category":"product_version_range","name":"vers:generic/Prisma Access>=12.1.10-h4","product":{"name":"Palo Alto Networks Prisma Access","product_id":"PANW-Prisma-Access-68"}},{"category":"product_version_range","name":"vers:generic/Prisma Access>=11.2.0","product":{"name":"Palo Alto Networks Prisma Access","product_id":"PANW-Prisma-Access-57"}}]}]}]},"vulnerabilities":[{"cve":"CVE-2026-0325","product_status":{"fixed":["PANW-PAN-OS-957","PANW-PAN-OS-958","PANW-PAN-OS-959","PANW-PAN-OS-960","PANW-Prisma-Access-68"],"known_affected":["PANW-PAN-OS-957","PANW-PAN-OS-958","PANW-PAN-OS-959","PANW-PAN-OS-960","PANW-Prisma-Access-68","PANW-Prisma-Access-57"],"known_not_affected":["PANW-Cloud-NGFW-1"]},"notes":[{"category":"description","text":"An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated attacker with valid GlobalProtect credentials to bypass IP address restrictions and circumvent network access controls that rely on source IP filtering.\n\nCloud NGFW is not affected by this vulnerability.\n"}],"references":[{"category":"external","summary":"NVD - CVE-2026-0325","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0325"},{"category":"self","summary":"Palo Alto Networks Security Advisory CVE-2026-0325","url":"https://security.paloaltonetworks.com/CVE-2026-0325"}],"threats":[{"category":"impact","description":"An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated attacker with valid GlobalProtect credentials to bypass IP address restrictions and circumvent network access controls that rely on source IP filtering.\n\nCloud NGFW is not affected by this vulnerability.\n"}],"scores":[{"cvss_v4":{"version":"4.0","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","subConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","subIntegrityImpact":"LOW","vulnAvailabilityImpact":"NONE","subAvailabilityImpact":"NONE","Safety":"NOT_DEFINED","Automatable":"NO","Recovery":"AUTOMATIC","valueDensity":"DIFFUSE","vulnerabilityResponseEffort":"MODERATE","providerUrgency":"AMBER","exploitMaturity":"UNREPORTED","baseSeverity":"MEDIUM","baseScore":5.3,"threatSeverity":"LOW","threatScore":1.3,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U/AU:N/R:A/V:D/RE:M/U:Amber"},"products":["PANW-PAN-OS-957","PANW-PAN-OS-958","PANW-PAN-OS-959","PANW-PAN-OS-960","PANW-Prisma-Access-68","PANW-Prisma-Access-57"]}]}]}