What is GHSA-qj6h-xv6f-fhv4?

GHSA-qj6h-xv6f-fhv4 is a security advisory published by GitHub Security Advisories with Low severity. An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS®...

Which CVE IDs does GHSA-qj6h-xv6f-fhv4 cover?

GHSA-qj6h-xv6f-fhv4 covers the following CVE IDs: CVE-2026-0325. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-qj6h-xv6f-fhv4Low

An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS®...

Vendor

GitHub Security Advisories

Published

November 11, 2026

Last Modified

November 11, 2026

🔗 CVE IDs covered (1)

CVE-2026-0325 →

📋 Description

An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated attacker with valid GlobalProtect credentials to bypass IP address restrictions and circumvent network access controls that rely on source IP filtering.

Cloud NGFW is not affected by this vulnerability.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-0325
https://security.paloaltonetworks.com/CVE-2026-0325
https://github.com/advisories/GHSA-qj6h-xv6f-fhv4