https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:29:26.520668+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-14189 bdu:2026-14189 2026-10-02T19:29:26.526074+00:00 bdu:2026-14189 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1014 certfr-2026-avi-1014 — De multiples vulnérabilités ont été découvertes dans les produits Palo Alto Networks. Certaines d'entre elles permetten… 2026-10-02T19:29:26.526110+00:00 certfr-2026-avi-1014 https://cve.radiocsirt.org/vuln/euvd-2026-351945 EUVD-2026-351945 2026-10-02T19:29:26.526129+00:00 EUVD-2026-351945 https://cve.radiocsirt.org/vuln/fkie_cve-2026-0299 fkie_cve-2026-0299 2026-10-02T19:29:26.526141+00:00

Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges.

The GlobalProtect app on iOS, Android, and Chrome OS is not affected.

 https://cve.radiocsirt.org/vuln/ghsa-v8f9-pq46-34r9 GHSA-v8f9-pq46-34r9 2026-10-02T19:29:26.526171+00:00

Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges.

The GlobalProtect app on iOS, Android, and Chrome OS is not affected.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2804 WID-SEC-W-2026-2804 — Palo Alto Networks GlobalProtect App: Mehrere Schwachstellen 2026-10-02T19:29:26.526190+00:00

Ein Angreifer kann mehrere Schwachstellen in Palo Alto Networks GlobalProtect App ausnutzen, um Administratorrechte zu erlangen, beliebigen Code mit Administratorrechten auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und offenzulegen sowie einen Denial-of-Service-Zustand auszulösen.