{
    "document": {
        "category": "csaf_base",
        "csaf_version": "2.0",
        "distribution": {
            "tlp": {
                "label": "WHITE"
            }
        },
        "lang": "en",
        "notes": [
            {
                "category": "legal_disclaimer",
                "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
            }
        ],
        "publisher": {
            "category": "coordinator",
            "contact_details": "cert@ncsc.nl",
            "name": "National Cyber Security Centre",
            "namespace": "https://www.ncsc.nl/"
        },
        "title": "CVE-2026-0299",
        "tracking": {
            "current_release_date": "2026-09-07T15:48:49.412538Z",
            "generator": {
                "date": "2026-02-17T15:00:00Z",
                "engine": {
                    "name": "V.E.L.M.A",
                    "version": "1.7"
                }
            },
            "id": "CVE-2026-0299",
            "initial_release_date": "2026-08-12T18:43:46.876356Z",
            "revision_history": [
                {
                    "date": "2026-08-12T18:43:46.876356Z",
                    "number": "1",
                    "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (8).| References created (1).| CWES updated (1)."
                },
                {
                    "date": "2026-08-12T18:43:51.426045Z",
                    "number": "2",
                    "summary": "NCSC Score created."
                },
                {
                    "date": "2026-08-13T02:38:50.884535Z",
                    "number": "3",
                    "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (4).| Product Identifiers created (324).| Products connected (2).| Product Identifiers removed (36).| References created (1).| CWES updated (1)."
                },
                {
                    "date": "2026-08-13T02:38:54.226621Z",
                    "number": "4",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-08-13T03:25:23.336885Z",
                    "number": "5",
                    "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (1).| CWES updated (1)."
                },
                {
                    "date": "2026-08-13T03:25:25.893632Z",
                    "number": "6",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-08-13T04:40:09.617416Z",
                    "number": "7",
                    "summary": "Product Identifiers created (108).| Product Identifiers removed (108).| Unknown change."
                },
                {
                    "date": "2026-08-13T07:35:05.956996Z",
                    "number": "8",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-08-13T11:54:09.351058Z",
                    "number": "9",
                    "summary": "Source connected.| CVE status created. (valid)| Products connected (4).| References created (7)."
                },
                {
                    "date": "2026-08-13T11:54:11.066257Z",
                    "number": "10",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-08-13T15:34:36.619016Z",
                    "number": "11",
                    "summary": "Source connected.| CVE status created. (valid)| EPSS created."
                },
                {
                    "date": "2026-08-13T15:34:40.321972Z",
                    "number": "12",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-08-14T03:41:37.906936Z",
                    "number": "13",
                    "summary": "Source connected.| CVE status created. (valid)"
                },
                {
                    "date": "2026-08-31T04:30:20.276217Z",
                    "number": "14",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-09-02T10:46:14.739701Z",
                    "number": "15",
                    "summary": "EPSS updated."
                },
                {
                    "date": "2026-09-02T23:33:23.192861Z",
                    "number": "16",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-09-03T14:38:48.906985Z",
                    "number": "17",
                    "summary": "EPSS updated."
                },
                {
                    "date": "2026-09-03T18:28:41.763928Z",
                    "number": "18",
                    "summary": "CVSS created.| Products connected (14).| Product Identifiers created (26).| Products created (12)."
                },
                {
                    "date": "2026-09-03T18:28:44.172253Z",
                    "number": "19",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-09-03T19:02:16.474446Z",
                    "number": "20",
                    "summary": "EPSS updated."
                },
                {
                    "date": "2026-09-04T15:48:20.306422Z",
                    "number": "21",
                    "summary": "EPSS updated."
                },
                {
                    "date": "2026-09-05T03:58:02.923882Z",
                    "number": "22",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-09-05T15:46:06.993497Z",
                    "number": "23",
                    "summary": "EPSS updated."
                },
                {
                    "date": "2026-09-06T15:47:44.302908Z",
                    "number": "24",
                    "summary": "EPSS updated."
                },
                {
                    "date": "2026-09-07T15:48:46.986460Z",
                    "number": "25",
                    "summary": "EPSS updated."
                }
            ],
            "status": "interim",
            "version": "25"
        }
    },
    "product_tree": {
        "branches": [
            {
                "branches": [
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/app <6.0.15",
                                "product": {
                                    "name": "vers:unknown/app <6.0.15",
                                    "product_id": "CSAFPID-8979646"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/app <6.2.8-h13",
                                "product": {
                                    "name": "vers:unknown/app <6.2.8-h13",
                                    "product_id": "CSAFPID-8979647"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/app <6.3.3-h14",
                                "product": {
                                    "name": "vers:unknown/app <6.3.3-h14",
                                    "product_id": "CSAFPID-8979645"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/app <6.3.3-h15",
                                "product": {
                                    "name": "vers:unknown/app <6.3.3-h15",
                                    "product_id": "CSAFPID-8979648"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "GlobalProtect"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:paloalto/*",
                                "product": {
                                    "name": "vers:paloalto/*",
                                    "product_id": "CSAFPID-2521531"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:paloalto/6.0.0",
                                "product": {
                                    "name": "vers:paloalto/6.0.0",
                                    "product_id": "CSAFPID-2521400"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:paloalto/6.0.15",
                                "product": {
                                    "name": "vers:paloalto/6.0.15",
                                    "product_id": "CSAFPID-7941836"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:paloalto/6.2.0",
                                "product": {
                                    "name": "vers:paloalto/6.2.0",
                                    "product_id": "CSAFPID-3051598"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:paloalto/6.2.8-h13",
                                "product": {
                                    "name": "vers:paloalto/6.2.8-h13",
                                    "product_id": "CSAFPID-8973518"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:paloalto/6.3.0",
                                "product": {
                                    "name": "vers:paloalto/6.3.0",
                                    "product_id": "CSAFPID-8973516"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:paloalto/6.3.3-h14",
                                "product": {
                                    "name": "vers:paloalto/6.3.3-h14",
                                    "product_id": "CSAFPID-8973517"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:paloalto/6.3.3-h15",
                                "product": {
                                    "name": "vers:paloalto/6.3.3-h15",
                                    "product_id": "CSAFPID-8973525"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.0.0|<6.0.15",
                                "product": {
                                    "name": "vers:unknown/6.0.0|<6.0.15",
                                    "product_id": "CSAFPID-8976384",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.2.0",
                                "product": {
                                    "name": "vers:unknown/6.2.0",
                                    "product_id": "CSAFPID-1363629",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Linux:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.2.0|<6.2.8-h13",
                                "product": {
                                    "name": "vers:unknown/6.2.0|<6.2.8-h13",
                                    "product_id": "CSAFPID-8976386",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.3.0|<6.3.3-h14",
                                "product": {
                                    "name": "vers:unknown/6.3.0|<6.3.3-h14",
                                    "product_id": "CSAFPID-8976385",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.3.0|<6.3.3-h15",
                                "product": {
                                    "name": "vers:unknown/6.3.0|<6.3.3-h15",
                                    "product_id": "CSAFPID-8976383",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Linux:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/all",
                                "product": {
                                    "name": "vers:unknown/all",
                                    "product_id": "CSAFPID-2473023"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "GlobalProtect App"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.2.8",
                                "product": {
                                    "name": "vers:unknown/6.2.8",
                                    "product_id": "CSAFPID-2952333",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:paloaltonetworks:globalprotect:6.2.8:-:*:*:*:macos:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.2.8-h10",
                                "product": {
                                    "name": "vers:unknown/6.2.8-h10",
                                    "product_id": "CSAFPID-9119951",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:paloaltonetworks:globalprotect:6.2.8:h10:*:*:*:macos:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.2.8-h11",
                                "product": {
                                    "name": "vers:unknown/6.2.8-h11",
                                    "product_id": "CSAFPID-9119952",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:paloaltonetworks:globalprotect:6.2.8:h11:*:*:*:macos:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.2.8-h12",
                                "product": {
                                    "name": "vers:unknown/6.2.8-h12",
                                    "product_id": "CSAFPID-9119953",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:paloaltonetworks:globalprotect:6.2.8:h12:*:*:*:macos:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.2.8-h2",
                                "product": {
                                    "name": "vers:unknown/6.2.8-h2",
                                    "product_id": "CSAFPID-9119954",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:paloaltonetworks:globalprotect:6.2.8:h2:*:*:*:macos:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.2.8-h3",
                                "product": {
                                    "name": "vers:unknown/6.2.8-h3",
                                    "product_id": "CSAFPID-9119955",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:paloaltonetworks:globalprotect:6.2.8:h3:*:*:*:macos:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.2.8-h4",
                                "product": {
                                    "name": "vers:unknown/6.2.8-h4",
                                    "product_id": "CSAFPID-9119956",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:paloaltonetworks:globalprotect:6.2.8:h4:*:*:*:macos:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.2.8-h5",
                                "product": {
                                    "name": "vers:unknown/6.2.8-h5",
                                    "product_id": "CSAFPID-9119957",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:paloaltonetworks:globalprotect:6.2.8:h5:*:*:*:macos:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.2.8-h6",
                                "product": {
                                    "name": "vers:unknown/6.2.8-h6",
                                    "product_id": "CSAFPID-9119958",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:paloaltonetworks:globalprotect:6.2.8:h6:*:*:*:macos:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.2.8-h7",
                                "product": {
                                    "name": "vers:unknown/6.2.8-h7",
                                    "product_id": "CSAFPID-8808193",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:paloaltonetworks:globalprotect:6.2.8:h7:*:*:*:macos:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.2.8-h8",
                                "product": {
                                    "name": "vers:unknown/6.2.8-h8",
                                    "product_id": "CSAFPID-9119959",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:paloaltonetworks:globalprotect:6.2.8:h8:*:*:*:macos:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.2.8-h9",
                                "product": {
                                    "name": "vers:unknown/6.2.8-h9",
                                    "product_id": "CSAFPID-9119960",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:paloaltonetworks:globalprotect:6.2.8:h9:*:*:*:macos:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.3.3",
                                "product": {
                                    "name": "vers:unknown/6.3.3",
                                    "product_id": "CSAFPID-2952339",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:-:*:*:*:linux:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.3.3-h1",
                                "product": {
                                    "name": "vers:unknown/6.3.3-h1",
                                    "product_id": "CSAFPID-8808194",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h1:*:*:*:linux:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.3.3-h11",
                                "product": {
                                    "name": "vers:unknown/6.3.3-h11",
                                    "product_id": "CSAFPID-9119961",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h11:*:*:*:macos:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.3.3-h12",
                                "product": {
                                    "name": "vers:unknown/6.3.3-h12",
                                    "product_id": "CSAFPID-9119962",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h12:*:*:*:macos:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.3.3-h2",
                                "product": {
                                    "name": "vers:unknown/6.3.3-h2",
                                    "product_id": "CSAFPID-8808195",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h2:*:*:*:linux:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.3.3-h3",
                                "product": {
                                    "name": "vers:unknown/6.3.3-h3",
                                    "product_id": "CSAFPID-8808196",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h3:*:*:*:macos:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.3.3-h4",
                                "product": {
                                    "name": "vers:unknown/6.3.3-h4",
                                    "product_id": "CSAFPID-8808197",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h4:*:*:*:macos:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.3.3-h6",
                                "product": {
                                    "name": "vers:unknown/6.3.3-h6",
                                    "product_id": "CSAFPID-8808198",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h6:*:*:*:macos:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.3.3-h7",
                                "product": {
                                    "name": "vers:unknown/6.3.3-h7",
                                    "product_id": "CSAFPID-8808199",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h7:*:*:*:macos:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.3.3-h8",
                                "product": {
                                    "name": "vers:unknown/6.3.3-h8",
                                    "product_id": "CSAFPID-8808200",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h8:*:*:*:macos:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.3.3-h9",
                                "product": {
                                    "name": "vers:unknown/6.3.3-h9",
                                    "product_id": "CSAFPID-8808201",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:paloaltonetworks:globalprotect:6.3.3:h9:*:*:*:macos:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/>=6.0.0|<6.0.15",
                                "product": {
                                    "name": "vers:unknown/>=6.0.0|<6.0.15",
                                    "product_id": "CSAFPID-8808203",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:linux:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/>=6.2.0|<6.2.8",
                                "product": {
                                    "name": "vers:unknown/>=6.2.0|<6.2.8",
                                    "product_id": "CSAFPID-8539986",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:macos:*:*"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/>=6.3.0|<6.3.3",
                                "product": {
                                    "name": "vers:unknown/>=6.3.0|<6.3.3",
                                    "product_id": "CSAFPID-2944400",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:linux:*:*"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "globalprotect"
                    }
                ],
                "category": "vendor",
                "name": "Palo Alto Networks"
            }
        ]
    },
    "vulnerabilities": [
        {
            "cve": "CVE-2026-0299",
            "cwe": {
                "id": "CWE-426",
                "name": "Untrusted Search Path"
            },
            "notes": [
                {
                    "category": "description",
                    "text": "Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges.\n\nThe GlobalProtect app on iOS, Android, and Chrome OS is not affected.\n",
                    "title": "paloalto - https://security.paloaltonetworks.com/json/CVE-2026-0299"
                },
                {
                    "category": "description",
                    "text": "Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges.\n\nThe GlobalProtect app on iOS, Android, and Chrome OS is not affected.",
                    "title": "cveprojectv5 - https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0299.json"
                },
                {
                    "category": "description",
                    "text": "Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges.\n\nThe GlobalProtect app on iOS, Android, and Chrome OS is not affected.",
                    "title": "nvd - https://nvd.nist.gov/vuln/detail/CVE-2026-0299"
                },
                {
                    "category": "other",
                    "text": "0.00203",
                    "title": "EPSS"
                },
                {
                    "category": "other",
                    "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
                    "title": "CVSSV4"
                },
                {
                    "category": "other",
                    "text": "5.9",
                    "title": "CVSSV4 base score"
                },
                {
                    "category": "other",
                    "text": "6.8",
                    "title": "NCSC Score"
                },
                {
                    "category": "other",
                    "text": "There is product data available from source Certbundde, Is related to an uncommon cvss source, Is related to an uncommon product source",
                    "title": "NCSC Score top increasing factors"
                },
                {
                    "category": "other",
                    "text": "There is cwe data available from source Paloalto",
                    "title": "NCSC Score top decreasing factors"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-2521400",
                    "CSAFPID-3051598",
                    "CSAFPID-8973516",
                    "CSAFPID-1363629",
                    "CSAFPID-8976383",
                    "CSAFPID-8976384",
                    "CSAFPID-8976385",
                    "CSAFPID-8976386",
                    "CSAFPID-8979645",
                    "CSAFPID-8979646",
                    "CSAFPID-8979647",
                    "CSAFPID-8979648",
                    "CSAFPID-2944400",
                    "CSAFPID-2952333",
                    "CSAFPID-2952339",
                    "CSAFPID-8539986",
                    "CSAFPID-8808193",
                    "CSAFPID-8808194",
                    "CSAFPID-8808195",
                    "CSAFPID-8808196",
                    "CSAFPID-8808197",
                    "CSAFPID-8808198",
                    "CSAFPID-8808199",
                    "CSAFPID-8808200",
                    "CSAFPID-8808201",
                    "CSAFPID-8808203",
                    "CSAFPID-9119951",
                    "CSAFPID-9119952",
                    "CSAFPID-9119953",
                    "CSAFPID-9119954",
                    "CSAFPID-9119955",
                    "CSAFPID-9119956",
                    "CSAFPID-9119957",
                    "CSAFPID-9119958",
                    "CSAFPID-9119959",
                    "CSAFPID-9119960",
                    "CSAFPID-9119961",
                    "CSAFPID-9119962"
                ],
                "known_not_affected": [
                    "CSAFPID-2521531",
                    "CSAFPID-7941836",
                    "CSAFPID-8973517",
                    "CSAFPID-8973518",
                    "CSAFPID-8973525",
                    "CSAFPID-2473023"
                ]
            },
            "references": [
                {
                    "category": "external",
                    "summary": "Source - first",
                    "url": "https://api.first.org/data/v1/epss"
                },
                {
                    "category": "external",
                    "summary": "Source - paloalto",
                    "url": "https://security.paloaltonetworks.com/json/CVE-2026-0299"
                },
                {
                    "category": "external",
                    "summary": "Source - cveprojectv5",
                    "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/0xxx/CVE-2026-0299.json"
                },
                {
                    "category": "external",
                    "summary": "Source - nvd",
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0299"
                },
                {
                    "category": "external",
                    "summary": "Source - certbundde",
                    "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2804.json"
                },
                {
                    "category": "external",
                    "summary": "Source - hkcert",
                    "url": "https://www.hkcert.org/security-bulletin/palo-alto-products-multiple-vulnerabilities_20260814"
                },
                {
                    "category": "external",
                    "summary": "Source - ncscclear",
                    "url": "https://vulnerabilities.ncsc.nl/manual/CVE-2026-0299"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde; cveprojectv5; nvd; paloalto",
                    "url": "https://security.paloaltonetworks.com/CVE-2026-0299"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://security.paloaltonetworks.com/CVE-2026-0295"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://security.paloaltonetworks.com/CVE-2026-0296"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://security.paloaltonetworks.com/CVE-2026-0297"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://security.paloaltonetworks.com/CVE-2026-0298"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2804.json"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2804"
                }
            ],
            "scores": [
                {
                    "cvss_v3": {
                        "version": "3.1",
                        "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                        "baseScore": 7.8,
                        "baseSeverity": "HIGH"
                    },
                    "products": [
                        "CSAFPID-1363629",
                        "CSAFPID-2521400",
                        "CSAFPID-2944400",
                        "CSAFPID-2952333",
                        "CSAFPID-2952339",
                        "CSAFPID-3051598",
                        "CSAFPID-8539986",
                        "CSAFPID-8808193",
                        "CSAFPID-8808194",
                        "CSAFPID-8808195",
                        "CSAFPID-8808196",
                        "CSAFPID-8808197",
                        "CSAFPID-8808198",
                        "CSAFPID-8808199",
                        "CSAFPID-8808200",
                        "CSAFPID-8808201",
                        "CSAFPID-8808203",
                        "CSAFPID-8973516",
                        "CSAFPID-8976383",
                        "CSAFPID-8976384",
                        "CSAFPID-8976385",
                        "CSAFPID-8976386",
                        "CSAFPID-8979645",
                        "CSAFPID-8979646",
                        "CSAFPID-8979647",
                        "CSAFPID-8979648",
                        "CSAFPID-9119951",
                        "CSAFPID-9119952",
                        "CSAFPID-9119953",
                        "CSAFPID-9119954",
                        "CSAFPID-9119955",
                        "CSAFPID-9119956",
                        "CSAFPID-9119957",
                        "CSAFPID-9119958",
                        "CSAFPID-9119959",
                        "CSAFPID-9119960",
                        "CSAFPID-9119961",
                        "CSAFPID-9119962"
                    ]
                }
            ],
            "title": "CVE-2026-0299"
        }
    ]
}