CVE-2026-0241

Summary

Incorrect Authorization vulnerabilities in Trust Protection Foundation allow attackers to bypass access controls and perform unauthorized actions on restricted resources.

Affected Software

VendorProductVersion RangeStatus
Palo Alto NetworksTrust Protection Foundation25.3.0 < 25.3.3affected
Palo Alto NetworksTrust Protection Foundation25.1.0 < 25.1.8affected
Palo Alto NetworksTrust Protection Foundation24.3.0 < 24.3.6affected
Palo Alto NetworksTrust Protection Foundation24.1.0 < 24.1.13affected

Weaknesses

  • CWE-754: CWE-754 Improper Check for Unusual or Exceptional Conditions

Workarounds

No known workarounds exist for this issue.

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References