CVE-2026-0314

N/A

A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition. The GlobalProtect™ app on ...

Affects 0 products across 1 vendor.

CVSS v44.3
EPSS0.1%
Percentile1th
PatchUnknown
CWE Weakness Definitions
CWE-843: CWE-843
◆ AI Analysis — automated analysis, not human-reviewed

A unscored severity vulnerability (CVE-2026-0314) affects the target system. A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition. The GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affe...

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2026-0314?
A unscored severity vulnerability (CVE-2026-0314) affects the target system. A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition. The GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affe...
Is CVE-2026-0314 actively exploited?
No confirmed active exploitation of CVE-2026-0314 as of 2026-10-18.
How do I remediate CVE-2026-0314?
Advisory: https://security.paloaltonetworks.com/CVE-2026-0314
What systems are affected by CVE-2026-0314?
CVE-2026-0314 affects Palo Alto Networks.
Vulnerability Details
CVE IDCVE-2026-0314
Published2026-10-14
Last Modified2026-10-15
ICS Relevance55%
Weakness (CWE)
SourceNVD
Official Description

A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition. The GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability.

Source: NIST NVD / MITRE CVE Database

Affected Products
VendorProductAffected Versions
Palo Alto Networks — —
Remediation
View Vendor Advisory →
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 3 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
Related CVEs affecting Palo Alto Networks
CVE-2012-6603 10.0 The web management UI in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x befor... CVE-2012-6592 10.0 Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5 allows remote ... CVE-2012-6593 10.0 Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote ... CVE-2012-6601 10.0 The device-management command-line interface in Palo Alto Networks PAN-OS bef... CVE-2020-2021 10.0 When Security Assertion Markup Language (SAML) authentication is enabled and ...
View all Palo Alto Networks CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →