Five high-risk vulnerabilities in Palo Alto GlobalProtect VPN

Just finished reading Martijn van Ramesdonk’s write-up on the five new GlobalProtect flaws. The technical side is a disaster. CVE-2026-0251 gives a local user direct escalation to SYSTEM and he even showed how to rip Active Directory passwords right off the endpoint agent.

The real joke is how Palo Alto handled it : they silently patched two of the bugs without crediting him and actively excluded the others from their bug bounty program. Companies force these highly invasive agents onto every machine for "security" and then treat the people who actually find the holes like a nuisance.

Sources in comment.