Multiple Vulnerabilities Identified in Palo Alto Products, Including Cloud NGFW and GlobalProtect App

The Hong Kong Computer Emergency Response Team Coordination Center has reported multiple vulnerabilities in various Palo Alto products. These flaws, identified with CVEs ranging from CVE-2026-0295 to CVE-2026-0301, could allow a remote attacker to achieve elevation of privilege, bypass security restrictions, disclose sensitive information, execute remote code, and manipulate data on affected systems. The affected products include Cloud NGFW versions on AWS and Azure, and GlobalProtect App 6.0 versions earlier than 6.0.15 across multiple operating systems, as well as GlobalProtect App 6.2 versions.