Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-0241

30
FAUCET Score

Incorrect Authorization vulnerabilities in Trust Protection Foundation allow attackers to bypass access controls and perform unauthorized actions on restricted resources.

First published: May 13, 2026Last modified: May 13, 2026

Impacted Technologies

VendorProductVersion(s)CPE
>= 24.1.0, < 24.1.13CPE matchmatch criteria
cpe:2.3:a:paloaltonetworks:trust_protection_foundation:*:*:*:*:*:*:*:*
>= 24.3.0, < 24.3.6CPE matchmatch criteria
cpe:2.3:a:paloaltonetworks:trust_protection_foundation:*:*:*:*:*:*:*:*
>= 25.1.0, < 25.1.8CPE matchmatch criteria
cpe:2.3:a:paloaltonetworks:trust_protection_foundation:*:*:*:*:*:*:*:*
>= 25.3.0, < 25.3.3CPE matchmatch criteria
cpe:2.3:a:paloaltonetworks:trust_protection_foundation:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 4.0

5.1MEDIUM

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:L/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber

Attack Vector
ADJACENT
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
NONE
User Interaction
NONE
VS Confidentiality
LOW
VS Integrity
LOW
VS Availability
HIGH
SS Confidentiality
LOW
SS Integrity
LOW
SS Availability
NONE
Exploit Maturity
UNREPORTED
CvssVersion
4.0

Exploit Intelligence

EPSS Score
0.34%
Probability of exploitation in next 30 days
EPSS Percentile
26.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0034 is in the 8th percentile among its peer group of 51,553 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (1)

paloaltovendor investigatingvia vendor_rss
View patch

Vendor Advisories (1)

paloaltopaloalto:security.paloaltonetworks.com/CVE-2026-0241MEDIUM

CVE-2026-0241 Trust Protection Foundation: Multiple Authorization Bypass Vulnerabilities (Severity: MEDIUM)

May 13, 2026

References

security.paloaltonetworks.com / CVE-2026-0241
Vendor Advisory