High · published August 13, 2026
Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. VPN tunnel traffic is not impacted.
The GlobalProtect app on iOS, Android, and Chrome OS is not affected.
| Product | Versions | Fixed in |
|---|---|---|
| paloaltonetworks/globalprotect | ≥ 6.0.0, < 6.0.15 | 6.0.15 |
| paloaltonetworks/globalprotect | ≥ 6.0.0, < 6.0.15 | 6.0.15 |
| paloaltonetworks/globalprotect | ≥ 6.0.0, < 6.0.15 | 6.0.15 |
| paloaltonetworks/globalprotect | ≥ 6.2.0, < 6.2.8 | 6.2.8 |
| paloaltonetworks/globalprotect | ≥ 6.2.0, < 6.2.8 | 6.2.8 |
| paloaltonetworks/globalprotect | ≥ 6.2.0, ≤ 6.2.9 | — |
| paloaltonetworks/globalprotect | ≥ 6.3.0, < 6.3.3 | 6.3.3 |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |
| paloaltonetworks/globalprotect | all versions | — |