CVE-2026-0240

An information disclosure vulnerability in Trust Protection Foundation enables an authenticated attacker to obtain sensitive information from the server's vault. Successful exploitation of this issue allows the attacker to impersonate any user within the environment and arbitrarily modify configuration settings.

CVSS v3 8.7 HIGH

8.7^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.3 / Impact : 5.8

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://security.paloaltonetworks.com/CVE-2026-0240	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:paloaltonetworks:trust_protection_foundation::::::::
	cpe:2.3:a:paloaltonetworks:trust_protection_foundation::::::::
	cpe:2.3:a:paloaltonetworks:trust_protection_foundation::::::::
	cpe:2.3:a:paloaltonetworks:trust_protection_foundation::::::::

History

26 Oct 2026, 14:10

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad de revelación de información en Trust Protection Foundation permite a un atacante autenticado obtener información sensible del almacén del servidor. La explotación exitosa de este problema permite al atacante suplantar a cualquier usuario dentro del entorno y modificar arbitrariamente la configuración.

Information

Published : 2026-05-13 19:16

Updated : 2026-10-26 14:10

NVD link : CVE-2026-0240

Mitre link : CVE-2026-0240

CVE.ORG link : CVE-2026-0240

JSON object : View

Products Affected

paloaltonetworks

trust_protection_foundation

CWE

CWE-497

Exposure of Sensitive System Information to an Unauthorized Control Sphere

{"id": "CVE-2026-0240", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-0240", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-05-15T03:56:11.417596Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.7, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.8, "exploitabilityScore": 2.3}], "cvssMetricV40": [{"type": "Secondary", "source": "psirt@paloaltonetworks.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "USER", "baseScore": 4.5, "Automatable": "NO", "attackVector": "ADJACENT", "baseSeverity": "MEDIUM", "valueDensity": "DIFFUSE", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber", "exploitMaturity": "UNREPORTED", "providerUrgency": "AMBER", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "LOW", "subIntegrityImpact": "LOW", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "LOW", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "MODERATE", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "psirt@paloaltonetworks.com", "affectedData": [{"vendor": "Palo Alto Networks", "product": "Trust Protection Foundation", "versions": [{"status": "affected", "changes": [{"at": "25.3.3", "status": "unaffected"}], "version": "25.3.0", "lessThan": "25.3.3", "versionType": "custom"}, {"status": "affected", "changes": [{"at": "25.1.8", "status": "unaffected"}], "version": "25.1.0", "lessThan": "25.1.8", "versionType": "custom"}, {"status": "affected", "changes": [{"at": "24.3.6", "status": "unaffected"}], "version": "24.3.0", "lessThan": "24.3.6", "versionType": "custom"}, {"status": "affected", "changes": [{"at": "24.1.13", "status": "unaffected"}], "version": "24.1.0", "lessThan": "24.1.13", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-05-13T19:16:57.767", "references": [{"url": "https://security.paloaltonetworks.com/CVE-2026-0240", "tags": ["Vendor Advisory"], "source": "psirt@paloaltonetworks.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@paloaltonetworks.com", "description": [{"lang": "en", "value": "CWE-497"}]}], "descriptions": [{"lang": "en", "value": "An information disclosure vulnerability in Trust Protection Foundation enables an authenticated attacker to obtain sensitive information from the server's vault. Successful exploitation of this issue allows the attacker to impersonate any user within the environment and arbitrarily modify configuration settings."}, {"lang": "es", "value": "Una vulnerabilidad de revelaci\u00f3n de informaci\u00f3n en Trust Protection Foundation permite a un atacante autenticado obtener informaci\u00f3n sensible del almac\u00e9n del servidor. La explotaci\u00f3n exitosa de este problema permite al atacante suplantar a cualquier usuario dentro del entorno y modificar arbitrariamente la configuraci\u00f3n."}], "lastModified": "2026-10-26T14:10:00.130", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:paloaltonetworks:trust_protection_foundation:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52DC45A9-9B20-4C9C-B080-95454CBF843B", "versionEndExcluding": "24.1.13", "versionStartIncluding": "24.1.0"}, {"criteria": "cpe:2.3:a:paloaltonetworks:trust_protection_foundation:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7EEE94C3-ADA5-4F01-A670-F902B48FEF65", "versionEndExcluding": "24.3.6", "versionStartIncluding": "24.3.0"}, {"criteria": "cpe:2.3:a:paloaltonetworks:trust_protection_foundation:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "134B1209-C811-42B3-9F9A-D73A039B5E7C", "versionEndExcluding": "25.1.8", "versionStartIncluding": "25.1.0"}, {"criteria": "cpe:2.3:a:paloaltonetworks:trust_protection_foundation:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AD9D632C-8323-4099-8C50-6023335414D1", "versionEndExcluding": "25.3.3", "versionStartIncluding": "25.3.0"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@paloaltonetworks.com"}