Description
An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated attacker with valid GlobalProtect credentials to bypass IP address restrictions and circumvent network access controls that rely on source IP filtering.
Cloud NGFW is not affected by this vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Palo Alto Networks | PAN-OS | 11.2.0 <11.2.16-h2 | — |
| Palo Alto Networks | PAN-OS | 12.2.0 <12.2.4-h2 | — |
| Palo Alto Networks | PAN-OS | 12.1.0 <12.1.10-h4 | — |
| Palo Alto Networks | Prisma Access | 11.2.0 | — |
| Palo Alto Networks | PAN-OS | 11.1.0 <11.1.16-h5 | — |
| Palo Alto Networks | Prisma Access | 12.1.0 <12.1.10-h4 | — |
Advisories 1
- WID-SEC-2026-4526 Palo Alto Networks PAN-OS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2026