CVE-2026-0241 - Vulnerability Details - OpenCVE

Incorrect Authorization vulnerabilities in Trust Protection Foundation allow attackers to bypass access controls and perform unauthorized actions on restricted resources.

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact Low

Subsequent System Integrity Impact Low

Subsequent System Availability Impact None

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Palo Alto Networks	Trust Protection Foundation

No data.

No data.

References

Link	Providers
https://www.spirityenterprise.com/pentest
https://www.spirityenterprise.com/managed-detection-response
https://www.spirityenterprise.com/virtual-ciso
https://security.paloaltonetworks.com/CVE-2026-0241

History

Wed, 13 May 2026 20:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 13 May 2026 19:15:00 +0000

Type	Values Removed	Values Added
Description		Incorrect Authorization vulnerabilities in Trust Protection Foundation allow attackers to bypass access controls and perform unauthorized actions on restricted resources.
Title		Trust Protection Foundation: Multiple Authorization Bypass Vulnerabilities
First Time appeared		Palo Alto Networks Palo Alto Networks trust Protection Foundation
Weaknesses		CWE-754
CPEs		cpe:2.3:a:palo_alto_networks:trust_protection_foundation::::::::
Vendors & Products		Palo Alto Networks Palo Alto Networks trust Protection Foundation
References		https://security.paloaltonetworks.com/CVE-2026-0241
Metrics		cvssV4_0 `{'score': 5.1, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:L/SI:L/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber'}`

MITRE

Status: PUBLISHED

Assigner: palo_alto

Published: 2026-05-13T19:01:24.094Z

Updated: 2026-05-13T19:30:09.308Z

Reserved: 2025-11-03T20:44:02.327Z

Link: CVE-2026-0241

Vulnrichment

Updated: 2026-05-13T19:30:03.532Z

NVD

Status : Received

Published: 2026-05-13T19:16:57.973

Modified: 2026-05-13T19:16:57.973

Link: CVE-2026-0241

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-0241", "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0", "state": "PUBLISHED", "assignerShortName": "palo_alto", "dateReserved": "2025-11-03T20:44:02.327Z", "datePublished": "2026-05-13T19:01:24.094Z", "dateUpdated": "2026-05-13T19:30:09.308Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0", "shortName": "palo_alto", "dateUpdated": "2026-05-13T19:01:24.094Z"}, "title": "Trust Protection Foundation: Multiple Authorization Bypass Vulnerabilities", "datePublic": "2026-05-13T16:00:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-754", "description": "CWE-754 Improper Check for Unusual or Exceptional Conditions", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-122", "descriptions": [{"lang": "en", "value": "CAPEC-122 Privilege Abuse"}]}], "affected": [{"vendor": "Palo Alto Networks", "product": "Trust Protection Foundation", "versions": [{"status": "affected", "version": "25.3.0", "lessThan": "25.3.3", "changes": [{"at": "25.3.3", "status": "unaffected"}], "versionType": "custom"}, {"status": "affected", "version": "25.1.0", "lessThan": "25.1.8", "changes": [{"at": "25.1.8", "status": "unaffected"}], "versionType": "custom"}, {"status": "affected", "version": "24.3.0", "lessThan": "24.3.6", "changes": [{"at": "24.3.6", "status": "unaffected"}], "versionType": "custom"}, {"status": "affected", "version": "24.1.0", "lessThan": "24.1.13", "changes": [{"at": "24.1.13", "status": "unaffected"}], "versionType": "custom"}], "defaultStatus": "unaffected"}], "cpeApplicability": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:palo_alto_networks:trust_protection_foundation:*:*:*:*:*:*:*:*", "versionEndExcluding": "25.3.3", "versionStartIncluding": "25.3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:palo_alto_networks:trust_protection_foundation:*:*:*:*:*:*:*:*", "versionEndExcluding": "25.1.8", "versionStartIncluding": "25.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:palo_alto_networks:trust_protection_foundation:*:*:*:*:*:*:*:*", "versionEndExcluding": "24.3.6", "versionStartIncluding": "24.3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:palo_alto_networks:trust_protection_foundation:*:*:*:*:*:*:*:*", "versionEndExcluding": "24.1.13", "versionStartIncluding": "24.1.0", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "OR"}], "descriptions": [{"lang": "en", "value": "Incorrect Authorization vulnerabilities in Trust Protection Foundation allow attackers to bypass access controls and perform unauthorized actions on restricted resources.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Incorrect Authorization vulnerabilities in Trust Protection Foundation allow attackers to bypass access controls and perform unauthorized actions on restricted resources.</p>"}]}], "references": [{"url": "https://security.paloaltonetworks.com/CVE-2026-0241", "tags": ["vendor-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "ADJACENT", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "LOW", "subConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "subIntegrityImpact": "LOW", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "NONE", "exploitMaturity": "UNREPORTED", "Safety": "NOT_DEFINED", "Automatable": "NO", "Recovery": "USER", "valueDensity": "DIFFUSE", "vulnerabilityResponseEffort": "MODERATE", "providerUrgency": "AMBER", "version": "4.0", "baseSeverity": "MEDIUM", "baseScore": 5.1, "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:L/SI:L/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber"}}], "configurations": [{"lang": "eng", "value": "No specific configuration is required for exposure to this vulnerability.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>No specific configuration is required for exposure to this vulnerability.</p>"}]}], "workarounds": [{"lang": "eng", "value": "No known workarounds exist for this issue.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>No known workarounds exist for this issue.</p>"}]}], "solutions": [{"lang": "eng", "value": "Version Minor Version Suggested Solution\nTrust Protection Foundation 25.3 25.3.0 through 25.3.2 Upgrade to 25.3.3 or later.\nTrust Protection Foundation 25.1 25.1.0 through 25.1.7 Upgrade to 25.1.8 or later.\nTrust Protection Foundation 24.3 24.3.0 through 24.3.5 Upgrade to 24.3.6 or later.\nTrust Protection Foundation 24.1 24.1.0 through 24.1.12 Upgrade to 24.1.13 or later.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<table class=\"tbl\"><tr><td>Version</td><td>Minor Version</td><td>Suggested Solution</td></tr><tr><td>Trust Protection Foundation 25.3</td><td>25.3.0 through 25.3.2</td><td>Upgrade to 25.3.3 or later.</td></tr><tr><td>Trust Protection Foundation 25.1</td><td>25.1.0 through 25.1.7</td><td>Upgrade to 25.1.8 or later.</td></tr><tr><td>Trust Protection Foundation 24.3</td><td>24.3.0 through 24.3.5</td><td>Upgrade to 24.3.6 or later.</td></tr><tr><td>Trust Protection Foundation 24.1</td><td>24.1.0 through 24.1.12</td><td>Upgrade to 24.1.13 or later.</td></tr></table>"}]}], "exploits": [{"lang": "en", "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Palo Alto Networks is not aware of any malicious exploitation of this issue.</p>"}]}], "timeline": [{"time": "2026-05-13T16:00:00.000Z", "lang": "en", "value": "Initial publication."}], "credits": [{"lang": "en", "value": "Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue.", "type": "other"}], "source": {"discovery": "INTERNAL"}, "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "x_affectedList": ["Trust Protection Foundation 25.3.0", "Trust Protection Foundation 25.3.1", "Trust Protection Foundation 25.3.2", "Trust Protection Foundation 25.1.0", "Trust Protection Foundation 25.1.1", "Trust Protection Foundation 25.1.2", "Trust Protection Foundation 25.1.3", "Trust Protection Foundation 25.1.4", "Trust Protection Foundation 25.1.5", "Trust Protection Foundation 25.1.6", "Trust Protection Foundation 25.1.7", "Trust Protection Foundation 24.3.0", "Trust Protection Foundation 24.3.1", "Trust Protection Foundation 24.3.2", "Trust Protection Foundation 24.3.3", "Trust Protection Foundation 24.3.4", "Trust Protection Foundation 24.3.5", "Trust Protection Foundation 24.1.0", "Trust Protection Foundation 24.1.1", "Trust Protection Foundation 24.1.2", "Trust Protection Foundation 24.1.3", "Trust Protection Foundation 24.1.4", "Trust Protection Foundation 24.1.5", "Trust Protection Foundation 24.1.6", "Trust Protection Foundation 24.1.7", "Trust Protection Foundation 24.1.8", "Trust Protection Foundation 24.1.9", "Trust Protection Foundation 24.1.10", "Trust Protection Foundation 24.1.11", "Trust Protection Foundation 24.1.12"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-13T19:16:03.842883Z", "id": "CVE-2026-0241", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-13T19:30:09.308Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-0241", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-13T19:16:03.842883Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-13T19:30:03.532Z"}}], "cna": {"title": "Trust Protection Foundation: Multiple Authorization Bypass Vulnerabilities", "source": {"discovery": "INTERNAL"}, "credits": [{"lang": "en", "type": "other", "value": "Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue."}], "impacts": [{"capecId": "CAPEC-122", "descriptions": [{"lang": "en", "value": "CAPEC-122 Privilege Abuse"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "USER", "baseScore": 5.1, "Automatable": "NO", "attackVector": "ADJACENT", "baseSeverity": "MEDIUM", "valueDensity": "DIFFUSE", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:L/SI:L/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber", "exploitMaturity": "UNREPORTED", "providerUrgency": "AMBER", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "LOW", "vulnIntegrityImpact": "LOW", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "vulnerabilityResponseEffort": "MODERATE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Palo Alto Networks", "product": "Trust Protection Foundation", "versions": [{"status": "affected", "changes": [{"at": "25.3.3", "status": "unaffected"}], "version": "25.3.0", "lessThan": "25.3.3", "versionType": "custom"}, {"status": "affected", "changes": [{"at": "25.1.8", "status": "unaffected"}], "version": "25.1.0", "lessThan": "25.1.8", "versionType": "custom"}, {"status": "affected", "changes": [{"at": "24.3.6", "status": "unaffected"}], "version": "24.3.0", "lessThan": "24.3.6", "versionType": "custom"}, {"status": "affected", "changes": [{"at": "24.1.13", "status": "unaffected"}], "version": "24.1.0", "lessThan": "24.1.13", "versionType": "custom"}], "defaultStatus": "unaffected"}], "exploits": [{"lang": "en", "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue.", "supportingMedia": [{"type": "text/html", "value": "<p>Palo Alto Networks is not aware of any malicious exploitation of this issue.</p>", "base64": false}]}], "timeline": [{"lang": "en", "time": "2026-05-13T16:00:00.000Z", "value": "Initial publication."}], "solutions": [{"lang": "eng", "value": "Version Minor Version Suggested Solution\nTrust Protection Foundation 25.3 25.3.0 through 25.3.2 Upgrade to 25.3.3 or later.\nTrust Protection Foundation 25.1 25.1.0 through 25.1.7 Upgrade to 25.1.8 or later.\nTrust Protection Foundation 24.3 24.3.0 through 24.3.5 Upgrade to 24.3.6 or later.\nTrust Protection Foundation 24.1 24.1.0 through 24.1.12 Upgrade to 24.1.13 or later.", "supportingMedia": [{"type": "text/html", "value": "<table class=\"tbl\"><tr><td>Version</td><td>Minor Version</td><td>Suggested Solution</td></tr><tr><td>Trust Protection Foundation 25.3</td><td>25.3.0 through 25.3.2</td><td>Upgrade to 25.3.3 or later.</td></tr><tr><td>Trust Protection Foundation 25.1</td><td>25.1.0 through 25.1.7</td><td>Upgrade to 25.1.8 or later.</td></tr><tr><td>Trust Protection Foundation 24.3</td><td>24.3.0 through 24.3.5</td><td>Upgrade to 24.3.6 or later.</td></tr><tr><td>Trust Protection Foundation 24.1</td><td>24.1.0 through 24.1.12</td><td>Upgrade to 24.1.13 or later.</td></tr></table>", "base64": false}]}], "datePublic": "2026-05-13T16:00:00.000Z", "references": [{"url": "https://security.paloaltonetworks.com/CVE-2026-0241", "tags": ["vendor-advisory"]}], "workarounds": [{"lang": "eng", "value": "No known workarounds exist for this issue.", "supportingMedia": [{"type": "text/html", "value": "<p>No known workarounds exist for this issue.</p>", "base64": false}]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "Incorrect Authorization vulnerabilities in Trust Protection Foundation allow attackers to bypass access controls and perform unauthorized actions on restricted resources.", "supportingMedia": [{"type": "text/html", "value": "<p>Incorrect Authorization vulnerabilities in Trust Protection Foundation allow attackers to bypass access controls and perform unauthorized actions on restricted resources.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-754", "description": "CWE-754 Improper Check for Unusual or Exceptional Conditions"}]}], "configurations": [{"lang": "eng", "value": "No specific configuration is required for exposure to this vulnerability.", "supportingMedia": [{"type": "text/html", "value": "<p>No specific configuration is required for exposure to this vulnerability.</p>", "base64": false}]}], "x_affectedList": ["Trust Protection Foundation 25.3.0", "Trust Protection Foundation 25.3.1", "Trust Protection Foundation 25.3.2", "Trust Protection Foundation 25.1.0", "Trust Protection Foundation 25.1.1", "Trust Protection Foundation 25.1.2", "Trust Protection Foundation 25.1.3", "Trust Protection Foundation 25.1.4", "Trust Protection Foundation 25.1.5", "Trust Protection Foundation 25.1.6", "Trust Protection Foundation 25.1.7", "Trust Protection Foundation 24.3.0", "Trust Protection Foundation 24.3.1", "Trust Protection Foundation 24.3.2", "Trust Protection Foundation 24.3.3", "Trust Protection Foundation 24.3.4", "Trust Protection Foundation 24.3.5", "Trust Protection Foundation 24.1.0", "Trust Protection Foundation 24.1.1", "Trust Protection Foundation 24.1.2", "Trust Protection Foundation 24.1.3", "Trust Protection Foundation 24.1.4", "Trust Protection Foundation 24.1.5", "Trust Protection Foundation 24.1.6", "Trust Protection Foundation 24.1.7", "Trust Protection Foundation 24.1.8", "Trust Protection Foundation 24.1.9", "Trust Protection Foundation 24.1.10", "Trust Protection Foundation 24.1.11", "Trust Protection Foundation 24.1.12"], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:palo_alto_networks:trust_protection_foundation:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "25.3.3", "versionStartIncluding": "25.3.0"}, {"criteria": "cpe:2.3:a:palo_alto_networks:trust_protection_foundation:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "25.1.8", "versionStartIncluding": "25.1.0"}, {"criteria": "cpe:2.3:a:palo_alto_networks:trust_protection_foundation:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "24.3.6", "versionStartIncluding": "24.3.0"}, {"criteria": "cpe:2.3:a:palo_alto_networks:trust_protection_foundation:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "24.1.13", "versionStartIncluding": "24.1.0"}], "operator": "OR"}], "operator": "OR"}], "providerMetadata": {"orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0", "shortName": "palo_alto", "dateUpdated": "2026-05-13T19:01:24.094Z"}}}, "cveMetadata": {"cveId": "CVE-2026-0241", "state": "PUBLISHED", "dateUpdated": "2026-05-13T19:30:09.308Z", "dateReserved": "2025-11-03T20:44:02.327Z", "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0", "datePublished": "2026-05-13T19:01:24.094Z", "assignerShortName": "palo_alto"}, "dataVersion": "5.2"}