CVE-2026-0319: CWE-754 Improper Check for Unusual or Exceptional Conditions in Palo Alto Networks Cloud NGFW

This vulnerability (CVE-2026-0319) involves improper input handling in the GlobalProtect gateway component of Palo Alto Networks PAN-OS software. It enables an authenticated user to impersonate another user by establishing a GlobalProtect session under that user's identity. The flaw is categorized under CWE-754 (Improper Check for Unusual or Exceptional Conditions). Cloud NGFW and Panorama are explicitly not affected. The CVSS 4.0 base score is 4.9 (medium severity), reflecting network attack vector, low attack complexity, and partial impact on confidentiality and integrity. The vulnerability affects multiple PAN-OS versions prior to fixed releases.

An authenticated user with low privileges can exploit this vulnerability to impersonate another user by establishing a GlobalProtect session with that user's identity. This could lead to unauthorized access to resources or actions performed under the impersonated identity. The impact on confidentiality and integrity is high, but availability and other factors are not affected. Cloud NGFW and Panorama are not impacted by this vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch links are provided, users should monitor Palo Alto Networks advisories for official fixes. Cloud NGFW is not affected, so no action is required for that product. For affected PAN-OS versions, apply vendor-provided patches once available to remediate this vulnerability.