{"id":"CVE-2026-0240","state":"PUBLISHED","title":"Trust Protection Foundation: Sensitive Information Disclosure Vulnerability","description":"An information disclosure vulnerability in Trust Protection Foundation enables an authenticated attacker to obtain sensitive information from the server's vault. Successful exploitation of this issue allows the attacker to impersonate any user within the environment and arbitrarily modify configuration settings.","publishedAt":"2026-05-13T18:54:07.294Z","updatedAt":"2026-05-15T09:56:36.574Z","severity":{"score":4.5,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber","source":"palo_alto"},"assigner":"palo_alto","products":["Palo Alto Networks Trust Protection Foundation"],"affected":[{"vendor":"Palo Alto Networks","product":"Trust Protection Foundation","defaultStatus":"unaffected","versions":[{"version":"25.3.0","status":"affected","lessThan":"25.3.3","changes":[{"at":"25.3.3","status":"unaffected"}],"versionType":"custom"},{"version":"25.1.0","status":"affected","lessThan":"25.1.8","changes":[{"at":"25.1.8","status":"unaffected"}],"versionType":"custom"},{"version":"24.3.0","status":"affected","lessThan":"24.3.6","changes":[{"at":"24.3.6","status":"unaffected"}],"versionType":"custom"},{"version":"24.1.0","status":"affected","lessThan":"24.1.13","changes":[{"at":"24.1.13","status":"unaffected"}],"versionType":"custom"}]}],"references":["https://security.paloaltonetworks.com/CVE-2026-0240"],"weaknesses":["CWE-497"],"ingestedAt":"2026-10-29T20:10:13.529Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/0xxx/CVE-2026-0240.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-0240","state":"PUBLISHED","datePublished":"2026-05-13T18:54:07.294Z","dateUpdated":"2026-05-15T09:56:36.574Z","assignerShortName":"palo_alto","assignerOrgId":"d6c1279f-00f6-4ef7-9217-f89ffe703ec0","dateReserved":"2025-11-03T20:44:01.023Z"},"containers":{"cna":{"title":"Trust Protection Foundation: Sensitive Information Disclosure Vulnerability","descriptions":[{"lang":"en","value":"An information disclosure vulnerability in Trust Protection Foundation enables an authenticated attacker to obtain sensitive information from the server's vault. Successful exploitation of this issue allows the attacker to impersonate any user within the environment and arbitrarily modify configuration settings."}],"affected":[{"vendor":"Palo Alto Networks","product":"Trust Protection Foundation","defaultStatus":"unaffected","versions":[{"version":"25.3.0","status":"affected","lessThan":"25.3.3","changes":[{"at":"25.3.3","status":"unaffected"}],"versionType":"custom"},{"version":"25.1.0","status":"affected","lessThan":"25.1.8","changes":[{"at":"25.1.8","status":"unaffected"}],"versionType":"custom"},{"version":"24.3.0","status":"affected","lessThan":"24.3.6","changes":[{"at":"24.3.6","status":"unaffected"}],"versionType":"custom"},{"version":"24.1.0","status":"affected","lessThan":"24.1.13","changes":[{"at":"24.1.13","status":"unaffected"}],"versionType":"custom"}]}],"references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0240","tags":["vendor-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV4_0":{"attackVector":"ADJACENT","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","subConfidentialityImpact":"LOW","vulnIntegrityImpact":"HIGH","subIntegrityImpact":"LOW","vulnAvailabilityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"UNREPORTED","Safety":"NOT_DEFINED","Automatable":"NO","Recovery":"USER","valueDensity":"DIFFUSE","vulnerabilityResponseEffort":"MODERATE","providerUrgency":"AMBER","version":"4.0","baseSeverity":"MEDIUM","baseScore":4.5,"vectorString":"CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-497","lang":"en","description":"CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere","type":"CWE"}]}],"providerMetadata":{"shortName":"palo_alto","orgId":"d6c1279f-00f6-4ef7-9217-f89ffe703ec0","dateUpdated":"2026-05-13T18:54:07.294Z"},"datePublic":"2026-05-13T16:00:00.000Z","impacts":[{"capecId":"CAPEC-37","descriptions":[{"lang":"en","value":"CAPEC-37 Retrieve Embedded Sensitive Data"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:palo_alto_networks:trust_protection_foundation:*:*:*:*:*:*:*:*","versionEndExcluding":"25.3.3","versionStartIncluding":"25.3.0","vulnerable":true},{"criteria":"cpe:2.3:a:palo_alto_networks:trust_protection_foundation:*:*:*:*:*:*:*:*","versionEndExcluding":"25.1.8","versionStartIncluding":"25.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:palo_alto_networks:trust_protection_foundation:*:*:*:*:*:*:*:*","versionEndExcluding":"24.3.6","versionStartIncluding":"24.3.0","vulnerable":true},{"criteria":"cpe:2.3:a:palo_alto_networks:trust_protection_foundation:*:*:*:*:*:*:*:*","versionEndExcluding":"24.1.13","versionStartIncluding":"24.1.0","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"configurations":[{"lang":"eng","value":"No specific configuration is required for exposure to this vulnerability.","supportingMedia":[{"type":"text/html","base64":false,"value":"<p>No specific configuration is required for exposure to this vulnerability.</p>"}]}],"workarounds":[{"lang":"eng","value":"No known workarounds exist for this issue.","supportingMedia":[{"type":"text/html","base64":false,"value":"<p>No known workarounds exist for this issue.</p>"}]}],"solutions":[{"lang":"eng","value":"Version  Minor Version  Suggested Solution\nTrust Protection Foundation 25.3  25.3.0 through 25.3.2  Upgrade to 25.3.3 or later.\nTrust Protection Foundation 25.1  25.1.0 through 25.1.7  Upgrade to 25.1.8 or later.\nTrust Protection Foundation 24.3  24.3.0 through 24.3.5  Upgrade to 24.3.6 or later.\nTrust Protection Foundation 24.1  24.1.0 through 24.1.12  Upgrade to 24.1.13 or later.","supportingMedia":[{"type":"text/html","base64":false,"value":"<table class=\"tbl\"><tr><td>Version</td><td>Minor Version</td><td>Suggested Solution</td></tr><tr><td>Trust Protection Foundation 25.3</td><td>25.3.0 through 25.3.2</td><td>Upgrade to 25.3.3 or later.</td></tr><tr><td>Trust Protection Foundation 25.1</td><td>25.1.0 through 25.1.7</td><td>Upgrade to 25.1.8 or later.</td></tr><tr><td>Trust Protection Foundation 24.3</td><td>24.3.0 through 24.3.5</td><td>Upgrade to 24.3.6 or later.</td></tr><tr><td>Trust Protection Foundation 24.1</td><td>24.1.0 through 24.1.12</td><td>Upgrade to 24.1.13 or later.</td></tr></table>"}]}],"exploits":[{"lang":"en","value":"Palo Alto Networks is not aware of any malicious exploitation of this issue.","supportingMedia":[{"type":"text/html","base64":false,"value":"<p>Palo Alto Networks is not aware of any malicious exploitation of this issue.</p>"}]}],"timeline":[{"time":"2026-05-13T16:00:00.000Z","lang":"en","value":"Initial publication."}],"credits":[{"lang":"en","value":"Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue.","type":"other"}],"source":{"discovery":"INTERNAL"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"},"x_affectedList":["Trust Protection Foundation 25.3.0","Trust Protection Foundation 25.3.1","Trust Protection Foundation 25.3.2","Trust Protection Foundation 25.1.0","Trust Protection Foundation 25.1.1","Trust Protection Foundation 25.1.2","Trust Protection Foundation 25.1.3","Trust Protection Foundation 25.1.4","Trust Protection Foundation 25.1.5","Trust Protection Foundation 25.1.6","Trust Protection Foundation 25.1.7","Trust Protection Foundation 24.3.0","Trust Protection Foundation 24.3.1","Trust Protection Foundation 24.3.2","Trust Protection Foundation 24.3.3","Trust Protection Foundation 24.3.4","Trust Protection Foundation 24.3.5","Trust Protection Foundation 24.1.0","Trust Protection Foundation 24.1.1","Trust Protection Foundation 24.1.2","Trust Protection Foundation 24.1.3","Trust Protection Foundation 24.1.4","Trust Protection Foundation 24.1.5","Trust Protection Foundation 24.1.6","Trust Protection Foundation 24.1.7","Trust Protection Foundation 24.1.8","Trust Protection Foundation 24.1.9","Trust Protection Foundation 24.1.10","Trust Protection Foundation 24.1.11","Trust Protection Foundation 24.1.12"]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-05-15T03:56:11.417596Z","id":"CVE-2026-0240","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-05-15T09:56:36.574Z"}}]}}}