CVE-2026-0315

N/A

A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to...

Affects 0 products across 1 vendor.

CVSS v45.9
EPSS0.1%
Percentile1th
PatchUnknown
CWE Weakness Definitions
CWE-426: CWE-426
Related Attack Patterns (CAPEC)
CAPEC-38 Leveraging/Manipulating Configuration File Search Paths
via CWE-426

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

A unscored severity vulnerability (CVE-2026-0315) affects the target system. A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to execute arbitrary commands with administrative privi...

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2026-0315?
A unscored severity vulnerability (CVE-2026-0315) affects the target system. A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to execute arbitrary commands with administrative privi...
Is CVE-2026-0315 actively exploited?
No confirmed active exploitation of CVE-2026-0315 as of 2026-10-20.
How do I remediate CVE-2026-0315?
Advisory: https://security.paloaltonetworks.com/CVE-2026-0315
What systems are affected by CVE-2026-0315?
CVE-2026-0315 affects Palo Alto Networks.
Vulnerability Details
CVE IDCVE-2026-0315
Published2026-10-14
Last Modified2026-10-16
ICS Relevance55%
Weakness (CWE)
SourceNVD
Official Description

A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on Linux, Windows, iOS, Android and Chrome OS is not affected by this vulnerability.

Source: NIST NVD / MITRE CVE Database

Affected Products
VendorProductAffected Versions
Palo Alto Networks — —
Remediation
View Vendor Advisory →
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 5 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
Related CVEs affecting Palo Alto Networks
CVE-2012-6603 10.0 The web management UI in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x befor... CVE-2012-6592 10.0 Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5 allows remote ... CVE-2012-6593 10.0 Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote ... CVE-2012-6601 10.0 The device-management command-line interface in Palo Alto Networks PAN-OS bef... CVE-2020-2021 10.0 When Security Assertion Markup Language (SAML) authentication is enabled and ...
View all Palo Alto Networks CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →