CVE-2026-0241 Trust Protection Foundation: Multiple Authorization Bypass Vulnerabilities
Attackers can bypass access controls to perform unauthorized actions on restricted resources in Trust Protection Foundation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-0241?
CVE-2026-0241 is a medium-severity missing authorization vulnerability in Palo Alto Networks Trust Protection Foundation, published on 13 May 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Incorrect Authorization vulnerabilities in Trust Protection Foundation allow attackers to bypass access controls and perform unauthorized actions on restricted resources.
Weakness: CWE-754
Which versions are affected by CVE-2026-0241?
It affects 1 product.
Products include Paloaltonetworks Trust Protection Foundation.
How do I fix CVE-2026-0241?
No fix has been published for CVE-2026-0241 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2026-0241 being exploited?
There is no known exploitation of CVE-2026-0241 in the wild and no public exploit code.
Other vulnerabilities in Palo Alto Networks Trust Protection Foundation
Sources
Also known as GHSA-4q7p-q2qv-66rm.