CVE-2026-0240
Trust Protection Foundation: Sensitive Information Disclosure Vulnerability
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 4.5EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
13 May 2026Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An information disclosure vulnerability in Trust Protection Foundation enables an authenticated attacker to obtain sensitive information from the server's vault. Successful exploitation of this issue allows the attacker to impersonate any user within the environment and arbitrarily modify configuration settings.
CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
Affected products
Palo Alto Networks · Trust Protection FoundationWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →