High7.7Vendor: MediumPalo Alto Networks Updated

High [CVE-2026-0297] GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake

This high-severity Palo Alto Networks advisory covers CVE-2026-0297 affecting GlobalProtect App.

CVE-2026-0297 Published Aug 12, 2026

CVE-2026-0297

Affected products & platforms

Palo Alto NetworksGlobalProtect

Open vendor advisory

Android app · Google Play

Monitor future Palo Alto Networks CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery

Get CVE alerts See app features

Summary

CVE-2026-0297 GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake

Affected versions

GlobalProtect App 6.3: < 6.3.3-h15 on Linux< 6.3.3-h14 (6.3.3-1121) on macOS< 6.3.3-h14 (6.3.3-1121) on Windows< 6.3.5 on iOS< 6.3.5 on Android< 6.3.5 on Chrome OS
GlobalProtect App 6.2: All on Linux< 6.2.8-h13 (6.2.8-1045) on macOS< 6.2.8-h13 (6.2.8-1045) on Windows
GlobalProtect App 6.0: < 6.0.15 on Linux< 6.0.15 on macOS< 6.0.15 on Windows< 6.0.15 on iOS< 6.0.15 on Android< 6.0.15 on Chrome OS

Official advisory · high-confidence parse· fetched 2 hours ago·verify at source

Fixed versions

GlobalProtect App >= 6.3.3-h15
GlobalProtect App >= 6.0.15
GlobalProtect App >= 6.3.3-h14
GlobalProtect App >= 6.2.8-h13
GlobalProtect App >= 6.3.5

Official advisory · high-confidence parse· fetched 2 hours ago·verify at source

Mitigation checklist

Recommended fix / mitigation

VersionMinor VersionSuggested Solution GlobalProtect App 6.3/6.2 on Linux 6.2.0 through 6.3.3-h14 Upgrade to 6.3.3-h15 or later.

Temporary workarounds

Customers can mitigate the risk of this issue by taking either of the following three actions:
Enforce SSL-Only VPN Connections: Modify your GlobalProtect Portal configurations to disable IPSec/UDP tunneling, forcing the client applications to connect exclusively via SSL VPN mode.
Therefore the first connection is not protected.

Official advisory · high-confidence parse· fetched 2 hours ago·verify at source

Sources

Official and corroborating records used to build this advisory.

Palo Alto Networks Security Advisoriesofficial
Official vendor source used to discover this advisory; it remains the authority for affected products and remediation. Discovered from the machine-readable feed https://security.paloaltonetworks.com/rss.xml; this link opens the Palo Alto Networks advisory index instead of the raw feed document.
Palo Alto Networks
Official vendor advisoryofficial
Official advisory page fetched and parsed; accepted detail fields are attributed to this page.
Palo Alto Networks

Cross-references

Validate CVE metadata against the authoritative registries.

CVE-2026-0297NVD CVE.org MITRE

Official resources

GlobalProtect app release notes & upgrade docs
Release notes
This advisory names 6.3.3-h15 / 6.0.15 / 6.3.3-h14 as the first fixed releases — official upgrade documentation for the GlobalProtect app.
Palo Alto Networks Security Advisories portal
Official documentation
Canonical advisory portal — check here for the latest revision of this advisory and affected-version updates.

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.