CVE-2026-0241

Trust Protection Foundation: Multiple Authorization Bypass Vulnerabilities

Published May 13, 2026 CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Description
Incorrect Authorization vulnerabilities in Trust Protection Foundation allow attackers to bypass access controls and perform unauthorized actions on restricted resources.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description Incorrect Authorization vulnerabilities in Trust Protection Foundation allow attackers to bypass access controls and perform unauthorized actions on restricted resources.
Title Trust Protection Foundation: Multiple Authorization Bypass Vulnerabilities
First Time appeared Palo Alto Networks
Palo Alto Networks trust Protection Foundation
Weaknesses CWE-754
CPEs cpe:2.3:a:palo_alto_networks:trust_protection_foundation:*:*:*:*:*:*:*:*
Vendors & Products Palo Alto Networks
Palo Alto Networks trust Protection Foundation
References
Metrics cvssV4_0

{'score': 5.1, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:L/SI:L/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
palo_alto
Published
Updated
May 13, 2026, 7:30 PM
Reserved
Nov 3, 2025, 8:44 PM
Status
Analyzed
Published
May 13, 2026, 7:16 PM
Modified
Oct 26, 2026, 2:10 PM