Reported by 2 outlets

Timeline

1. original reporting

   Palo Alto GlobalProtect Vulnerabilities Enable SYSTEM and Root-Level Access

   gbhackers.com · 62d ago · August 13th, 2026

   Palo Alto Networks has released security advisories for multiple vulnerabilities in the GlobalProtect App that could allow a local attacker to elevate their privileges to SYSTEM on Windows or to root on Linux and macOS systems. These advisories were published on August 12, 2026, and the vulnerabilities affect GlobalProtect App versions 6.0, 6.2, and 6.3 […] The post Palo Alto GlobalProtect Vulnerabilities Enable SYSTEM and Root-Level Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .

2. update from gbhackers.com

   5 Palo Alto GlobalProtect Flaws Let Attackers Gain SYSTEM/Root Access and Steal AD Passwords

   gbhackers.com · 50d ago · August 25th, 2026

   Security researcher Martijn van Ramesdonk has disclosed five vulnerabilities affecting Palo Alto Networks’ GlobalProtect, an enterprise VPN and endpoint agent widely used across corporate environments on Windows, macOS, and Linux. The issues include local privilege escalation vulnerabilities that could allow a low-privileged attacker with access to an endpoint to gain full SYSTEM privileges on Windows […] The post 5 Palo Alto GlobalProtect Flaws Let Attackers Gain SYSTEM/Root Access and Steal AD Passwords appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .

3. update from cyberpress.org

   Five GlobalProtect Vulnerabilities Expose Enterprise VPN Users to Privilege Escalation

   cyberpress.org · 50d ago · August 25th, 2026

   The findings include local privilege-escalation flaws and an alleged credential-recovery technique that could expose Active Directory passwords from an affected device. The disclosure has also sharpened scrutiny of vendor response practices when researchers follow coordinated vulnerability disclosure procedures. Five GlobalProtect Vulnerabilities Martijn van Ramesdonk, who published the research on a dedicated website, said he first reported the issues to Palo Alto Networks in early April 2026. He said two findings were ultimately consolidated into CVE-2026-0251. The NVD assigns CVE-2026-0251 a CVSS 3.1 base score of 7.8. That rating reflects the impact of a weakness that requires local access but can grant an attacker complete operating-system control. In practical terms, malware or an untrusted user account that has already landed on a corporate endpoint could execute arbitrary commands with the device’s highest privileges, bypassing user-level security boundaries. GlobalProtect Flaw (Source: CSN) Van Ramesdonk said the research went further than elevation of privilege. By abusing privileged GlobalProtec