https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T14:57:07.226420+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-5918 CVE-2024-5918 — PAN-OS: Improper Certificate Validation Enables Impersonation of a Legitimate GlobalProtect User 2026-10-04T14:57:07.242079+00:00

Affected: Palo Alto Networks Cloud NGFW, Palo Alto Networks PAN-OS, Palo Alto Networks Prisma Access

An improper certificate validation vulnerability in Palo Alto Networks PAN-OS software enables an authorized user with a specially crafted client certificate to connect to an impacted GlobalProtect portal or GlobalProtect gateway as a different legitimate user. This attack is possible only if you "Allow Authentication with User Credentials OR Client Certificate."