Log in Start free

Vulnerability · Published May 13, 2026 · Assigned by palo_alto

CVE-2026-0242Trust Protection Foundation: SQL Injection Vulnerability

Medium 6.1

In plain English

A medium-severity SQL injection in Trust Protection Foundation from Palo Alto Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities).

Severity (CVSS 4.0)6.1Medium
Exploit odds (30 days)0.2%top 83.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A SQL injection vulnerability in Trust Protection Foundation allows an authenticated attacker to execute arbitrary SQL commands against the product database. Successful exploitation could allow an attacker to read sensitive data, modify database contents, and escalate privileges to gain full administrative control of the platform.

Affected products (as reported)

VendorProductVersions
Palo Alto Networks Trust Protection Foundation 25.3.0 – before 25.3.325.1.0 – before 25.1.824.3.0 – before 24.3.624.1.0 – before 24.1.13

Weakness: CWE-89 · Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:U/AU:Y/R:U/V:C/RE:M/U:Amber

References