https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T17:28:40.401024+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-07187 bdu:2026-07187 2026-10-05T17:28:40.502405+00:00 bdu:2026-07187 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0596 certfr-2026-avi-0596 — De multiples vulnérabilités ont été découvertes dans les produits Palo Alto Networks. Certaines d'entre elles permetten… 2026-10-05T17:28:40.502455+00:00 certfr-2026-avi-0596 https://cve.radiocsirt.org/vuln/euvd-2026-318396 EUVD-2026-318396 2026-10-05T17:28:40.502485+00:00 EUVD-2026-318396 https://cve.radiocsirt.org/vuln/fkie_cve-2026-0250 fkie_cve-2026-0250 2026-10-05T17:28:40.502505+00:00

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway.

The GlobalProtect app on iOS is not affected.

 https://cve.radiocsirt.org/vuln/ghsa-mv4m-c9mp-36jr GHSA-mv4m-c9mp-36jr 2026-10-05T17:28:40.502558+00:00

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway.

The GlobalProtect app on iOS is not affected.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1535 WID-SEC-W-2026-1535 — Palo Alto Networks GlobalProtect App: Mehrere Schwachstellen 2026-10-05T17:28:40.502593+00:00

Ein Angreifer kann mehrere Schwachstellen in Palo Alto Networks GlobalProtect App ausnutzen, um Administratorrechte zu erlangen, beliebigen Code mit Administratorrechten auszuführen, vertrauliche Informationen offenzulegen, Daten zu manipulieren und einen Denial-of-Service-Zustand herbeizuführen.