Description
A SQL injection vulnerability in Trust Protection Foundation allows an authenticated attacker to execute arbitrary SQL commands against the product database. Successful exploitation could allow an attacker to read sensitive data, modify database contents, and escalate privileges to gain full administrative control of the platform.
Published: 2026-05-13
Score: 6.1 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 13 May 2026 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 13 May 2026 19:15:00 +0000

Type Values Removed Values Added
Description A SQL injection vulnerability in Trust Protection Foundation allows an authenticated attacker to execute arbitrary SQL commands against the product database. Successful exploitation could allow an attacker to read sensitive data, modify database contents, and escalate privileges to gain full administrative control of the platform.
Title Trust Protection Foundation: SQL Injection Vulnerability
First Time appeared Palo Alto Networks
Palo Alto Networks trust Protection Foundation
Weaknesses CWE-89
CPEs cpe:2.3:a:palo_alto_networks:trust_protection_foundation:*:*:*:*:*:*:*:*
Vendors & Products Palo Alto Networks
Palo Alto Networks trust Protection Foundation
References
Metrics cvssV4_0

{'score': 6.1, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:U/AU:Y/R:U/V:C/RE:M/U:Amber'}

Subscriptions

Palo Alto Networks Trust Protection Foundation
cve-icon MITRE

Status: PUBLISHED

Assigner: palo_alto

Published:

Updated: 2026-05-15T03:56:11.733Z

Reserved: 2025-11-03T20:44:03.175Z

Link: CVE-2026-0242

cve-icon Vulnrichment

Updated: 2026-05-13T19:29:33.504Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-05-13T19:16:58.130

Modified: 2026-05-14T16:21:23.190

Link: CVE-2026-0242

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-05-14T14:33:47Z

Weaknesses