Confirmed 100Patch availableVulnerabilityFirst seen 10 Nov 2026, 07:00 UTC

CVE-2026-0250 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway (Severity: MEDIUM)

Coverage

Headline	Source	Type	Published
CVE-2026-0250 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway (Severity: MEDIUM)	Palo Alto Networks Security Advisories	Official	10 Nov 2026, 07:00 UTC

Vulnerabilities and remediation

CVE-2026-0250 Patch available CVSS pending

Fixed in: GlobalProtect App 6.3.3-h9 (6.3.3-999) GlobalProtect App 6.2.8-h10 (6.2.8-948) GlobalProtect App 6.1.13 GlobalProtect App 6.3.3-h2 (6.3.3-42) GlobalProtect App 6.0.11 GlobalProtect App 6.0.13 GlobalProtect App 6.0.14 GlobalProtect UWP App 6.3.3-h10
Vendor solution: VERSION MINOR VERSION SUGGESTED SOLUTION GlobalProtect App 6.3 on Windows 6.3.0 through 6.3.3-h8 Upgrade to 6.3.3-h9 (6.3.3-999) or later. GlobalProtect App 6.2 on Windows 6.2.0 through 6.2.8-h9 Upgrade to 6.2.8-h10 (6.2.8-948) or later. GlobalProtect App 6.0 on Windows 6.0.0 through 6.0.12 Upgrade to 6.0.13 or later. GlobalProtect App 6.0 on Linux 6.0.0 through 6.0.10 Upgrade to 6.0.11 or later. GlobalProtect App 6.2/6.3 on Linux 6.2.0 through 6.3.3-h1 Upgrade to 6.3.3-h2 (6.3.3-42) or later. GlobalProtect App 6.3 on macOS 6.3.0 through 6.3.3-h8 Upgrade to 6.3.3-h9 (6.3.3-999) or later. GlobalProtect App 6.2 on macOS 6.2.0 through 6.2.8-h9 Upgrade to 6.2.8-h10 (6.2.8-948) or later. GlobalProtect App 6.0 on macOS 6.0.0 through 6.0.12 Upgrade to 6.0.13 or later. GlobalProtect App 6.1 on Android 6.1.0 through 6.1.12 Upgrade to 6.1.13 or later. GlobalProtect App 6.0 on Android 6.0.0 through 6.0.13 Upgrade to 6.0.14 or later. GlobalProtect App 6.1 on ChromeOS 6.1.0 through 6.1.12 Upgrade to 6.1.13 or later. GlobalProtect App 6.0 on ChromeOS 6.0.0 through 6.0.13
Workaround: No known workarounds exist for this issue.
Your version: Check if your GlobalProtect App version is affected →
Checked: Vendor record (palo_alto) checked 5 h ago

Fix status, versions and advisories from NVD; required actions from CISA. EPSS is FIRST’s estimate of the chance of exploitation in the next 30 days. Always confirm with the vendor advisory.

Why this score

Confidence	100 · Confirmed
Most trusted source	90
Independent organisations reporting it (1)	+0
Confirmed by an official source or CISA KEV	+10

We link to the original reporting and don’t reproduce it. Read the sources above for the full details.