https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:09:02.876563+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-14188 bdu:2026-14188 2026-10-03T13:09:02.950035+00:00 bdu:2026-14188 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1014 certfr-2026-avi-1014 — De multiples vulnérabilités ont été découvertes dans les produits Palo Alto Networks. Certaines d'entre elles permetten… 2026-10-03T13:09:02.950071+00:00 certfr-2026-avi-1014 https://cve.radiocsirt.org/vuln/euvd-2026-351944 EUVD-2026-351944 2026-10-03T13:09:02.950090+00:00 EUVD-2026-351944 https://cve.radiocsirt.org/vuln/fkie_cve-2026-0298 fkie_cve-2026-0298 2026-10-03T13:09:02.950103+00:00

An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on an affected client.

The GlobalProtect app on Linux, macOS, iOS, Android, and Chrome OS is not affected.

 https://cve.radiocsirt.org/vuln/ghsa-gf7f-qj8g-pr38 GHSA-gf7f-qj8g-pr38 2026-10-03T13:09:02.950136+00:00

An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on an affected client.

The GlobalProtect app on Linux, macOS, iOS, Android, and Chrome OS is not affected.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2804 WID-SEC-W-2026-2804 — Palo Alto Networks GlobalProtect App: Mehrere Schwachstellen 2026-10-03T13:09:02.950155+00:00

Ein Angreifer kann mehrere Schwachstellen in Palo Alto Networks GlobalProtect App ausnutzen, um Administratorrechte zu erlangen, beliebigen Code mit Administratorrechten auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und offenzulegen sowie einen Denial-of-Service-Zustand auszulösen.