CVE-2026-0242mediumCWE-89

CVE-2026-0242: medium-severity vulnerability in Palo Alto Networks Trust Protection Foundation

Trust Protection Foundation: SQL Injection Vulnerability

Published · Updated

Follow this CVE+ Monitor Trust Protection Foundation

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.1epss 0.2%
A SQL injection vulnerability in Trust Protection Foundation allows an authenticated attacker to execute arbitrary SQL commands against the product database. Successful exploitation could allow an attacker to read sensitive data, modify database contents, and escalate privileges to gain full administrative control of the platform.
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:U/AU:Y/R:U/V:C/RE:M/U:Amber
Affected products
Palo Alto Networks · Trust Protection Foundation
Related CVEs — Palo Alto Networks Trust Protection Foundation

In the same product, most dangerous first.

CVE-2026-0241MEDIUMTrust Protection Foundation: Multiple Authorization Bypass VulnerabilitiesEPSS 0.3%CVE-2026-0240MEDIUMTrust Protection Foundation: Sensitive Information Disclosure VulnerabilityEPSS 0.2%