Threat Intelligence Database

VoiceTra (Voice Translator) for Android version 9.1.3 contains a vulnerability where the destination in a communication channel is incorrectly specified. This flaw could cause users to be redirected to an attacker-controlled server or service, potentially leading to theft of input data or the display of incorrect translation results. The vulnerability has a medium severity rating with a CVSS score of 5.4. No official patch or remediation guidance is currently available.

An integer underflow vulnerability exists in the iscsiuio component of open-iscsi on Red Hat Enterprise Linux 10, specifically during IPv4 DHCP parsing. A remote attacker on the same local network segment can send a crafted IPv4/UDP DHCP reply to trigger an out-of-bounds read, causing the iscsiuio process to crash and resulting in a denial of service. This issue requires iscsiuio to be actively handling IPv4 DHCP traffic and specific network conditions to be exploitable.

CVE-2026-0301 is a low-severity information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS software for Cloud NGFW. It allows an unauthenticated user with network access to obtain sensitive information. Panorama products are not affected. The vulnerability is related to the use of uninitialized resources (CWE-908). No patch or official remediation guidance is currently provided.

Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on iOS, Android, and Chrome OS is not affected.

An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on an affected client. The GlobalProtect app on Linux, macOS, iOS, Android, and Chrome OS is not affected.

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man-in-the-middle (MitM) attacker or a rogue gateway to disrupt system processes and potentially execute arbitrary code with elevated privileges (SYSTEM privileges on Windows, and root privileges on macOS and Linux).

CVE-2026-0296 is an improper certificate validation vulnerability in the Palo Alto Networks GlobalProtect app versions 6.0.0, 6.2.0, and 6.3.0. This flaw allows an unauthenticated attacker with man-in-the-middle access to intercept and modify application communications, though VPN tunnel traffic remains unaffected. The vulnerability does not impact the GlobalProtect app on iOS, Android, or Chrome OS. The CVSS score is 4.5, indicating a medium severity issue.

A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root. The GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected.

CVE-2026-0294 is a privilege escalation vulnerability in the Palo Alto Networks Prisma Access Agent on Windows and macOS. It allows a local user to execute code with elevated privileges due to an uncontrolled search path element. Other platforms like Linux, iOS, Android, and ChromeOS are not affected. The vulnerability has a medium severity rating with a CVSS score of 6. No patch or official remediation guidance is currently available.

CVE-2026-0293 is a medium severity vulnerability in Palo Alto Networks Prisma Access Agent on Windows. It allows a local attacker with administrator privileges to bypass the anti-tamper protection, potentially gaining unauthorized access to protected processes and files. Other operating systems running the Prisma Access Agent are not affected. No patch or official remediation has been confirmed yet.