CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-0240

An information disclosure vulnerability in Trust Protection Foundation enables an authenticated attacker to obtain sensitive information from the server's vault. Successful exploitation of this issue allows the attacker to impersonate any user within the environment and arbitrarily modify configuration settings.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 15.0%

CVSS Severity

CVSS v3 Score 8.7

References

https://security.paloaltonetworks.com/CVE-2026-0240

Products affected by CVE-2026-0240

Paloaltonetworks » Trust Protection Foundation » Version: 24.1.0

cpe:2.3:a:paloaltonetworks:trust_protection_foundation:24.1.0
Paloaltonetworks » Trust Protection Foundation » Version: 24.3.0

cpe:2.3:a:paloaltonetworks:trust_protection_foundation:24.3.0
Paloaltonetworks » Trust Protection Foundation » Version: 25.1.0

cpe:2.3:a:paloaltonetworks:trust_protection_foundation:25.1.0
Paloaltonetworks » Trust Protection Foundation » Version: 25.3.0

cpe:2.3:a:paloaltonetworks:trust_protection_foundation:25.3.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-0240

Products

Pricing

Contact Us