{
    "dataType": "CVE_RECORD",
    "dataVersion": "5.2",
    "cveMetadata": {
        "cveId": "CVE-2026-0240",
        "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "state": "PUBLISHED",
        "assignerShortName": "palo_alto",
        "dateReserved": "2025-11-03T20:44:01.023Z",
        "datePublished": "2026-05-13T18:54:07.294Z",
        "dateUpdated": "2026-05-15T09:56:36.574Z"
    },
    "containers": {
        "cna": {
            "providerMetadata": {
                "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
                "shortName": "palo_alto",
                "dateUpdated": "2026-05-13T18:54:07.294Z"
            },
            "title": "Trust Protection Foundation: Sensitive Information Disclosure Vulnerability",
            "datePublic": "2026-05-13T16:00:00.000Z",
            "problemTypes": [
                {
                    "descriptions": [
                        {
                            "lang": "en",
                            "cweId": "CWE-497",
                            "description": "CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere",
                            "type": "CWE"
                        }
                    ]
                }
            ],
            "impacts": [
                {
                    "capecId": "CAPEC-37",
                    "descriptions": [
                        {
                            "lang": "en",
                            "value": "CAPEC-37 Retrieve Embedded Sensitive Data"
                        }
                    ]
                }
            ],
            "affected": [
                {
                    "vendor": "Palo Alto Networks",
                    "product": "Trust Protection Foundation",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "25.3.0",
                            "lessThan": "25.3.3",
                            "changes": [
                                {
                                    "at": "25.3.3",
                                    "status": "unaffected"
                                }
                            ],
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "25.1.0",
                            "lessThan": "25.1.8",
                            "changes": [
                                {
                                    "at": "25.1.8",
                                    "status": "unaffected"
                                }
                            ],
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "24.3.0",
                            "lessThan": "24.3.6",
                            "changes": [
                                {
                                    "at": "24.3.6",
                                    "status": "unaffected"
                                }
                            ],
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "24.1.0",
                            "lessThan": "24.1.13",
                            "changes": [
                                {
                                    "at": "24.1.13",
                                    "status": "unaffected"
                                }
                            ],
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }
            ],
            "cpeApplicability": [
                {
                    "nodes": [
                        {
                            "cpeMatch": [
                                {
                                    "criteria": "cpe:2.3:a:palo_alto_networks:trust_protection_foundation:*:*:*:*:*:*:*:*",
                                    "versionEndExcluding": "25.3.3",
                                    "versionStartIncluding": "25.3.0",
                                    "vulnerable": true
                                },
                                {
                                    "criteria": "cpe:2.3:a:palo_alto_networks:trust_protection_foundation:*:*:*:*:*:*:*:*",
                                    "versionEndExcluding": "25.1.8",
                                    "versionStartIncluding": "25.1.0",
                                    "vulnerable": true
                                },
                                {
                                    "criteria": "cpe:2.3:a:palo_alto_networks:trust_protection_foundation:*:*:*:*:*:*:*:*",
                                    "versionEndExcluding": "24.3.6",
                                    "versionStartIncluding": "24.3.0",
                                    "vulnerable": true
                                },
                                {
                                    "criteria": "cpe:2.3:a:palo_alto_networks:trust_protection_foundation:*:*:*:*:*:*:*:*",
                                    "versionEndExcluding": "24.1.13",
                                    "versionStartIncluding": "24.1.0",
                                    "vulnerable": true
                                }
                            ],
                            "negate": false,
                            "operator": "OR"
                        }
                    ],
                    "operator": "OR"
                }
            ],
            "descriptions": [
                {
                    "lang": "en",
                    "value": "An information disclosure vulnerability in Trust Protection Foundation enables an authenticated attacker to obtain sensitive information from the server's vault. Successful exploitation of this issue allows the attacker to impersonate any user within the environment and arbitrarily modify configuration settings.",
                    "supportingMedia": [
                        {
                            "type": "text/html",
                            "base64": false,
                            "value": "<p>An information disclosure vulnerability in Trust Protection Foundation enables an authenticated attacker to obtain sensitive information from the server's vault. Successful exploitation of this issue allows the attacker to impersonate any user within the environment and arbitrarily modify configuration settings.</p>"
                        }
                    ]
                }
            ],
            "references": [
                {
                    "url": "https://security.paloaltonetworks.com/CVE-2026-0240",
                    "tags": [
                        "vendor-advisory"
                    ]
                }
            ],
            "metrics": [
                {
                    "format": "CVSS",
                    "scenarios": [
                        {
                            "lang": "en",
                            "value": "GENERAL"
                        }
                    ],
                    "cvssV4_0": {
                        "attackVector": "ADJACENT",
                        "attackComplexity": "LOW",
                        "attackRequirements": "PRESENT",
                        "privilegesRequired": "LOW",
                        "userInteraction": "NONE",
                        "vulnConfidentialityImpact": "HIGH",
                        "subConfidentialityImpact": "LOW",
                        "vulnIntegrityImpact": "HIGH",
                        "subIntegrityImpact": "LOW",
                        "vulnAvailabilityImpact": "NONE",
                        "subAvailabilityImpact": "NONE",
                        "exploitMaturity": "UNREPORTED",
                        "Safety": "NOT_DEFINED",
                        "Automatable": "NO",
                        "Recovery": "USER",
                        "valueDensity": "DIFFUSE",
                        "vulnerabilityResponseEffort": "MODERATE",
                        "providerUrgency": "AMBER",
                        "version": "4.0",
                        "baseSeverity": "MEDIUM",
                        "baseScore": 4.5,
                        "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber"
                    }
                }
            ],
            "configurations": [
                {
                    "lang": "eng",
                    "value": "No specific configuration is required for exposure to this vulnerability.",
                    "supportingMedia": [
                        {
                            "type": "text/html",
                            "base64": false,
                            "value": "<p>No specific configuration is required for exposure to this vulnerability.</p>"
                        }
                    ]
                }
            ],
            "workarounds": [
                {
                    "lang": "eng",
                    "value": "No known workarounds exist for this issue.",
                    "supportingMedia": [
                        {
                            "type": "text/html",
                            "base64": false,
                            "value": "<p>No known workarounds exist for this issue.</p>"
                        }
                    ]
                }
            ],
            "solutions": [
                {
                    "lang": "eng",
                    "value": "Version  Minor Version  Suggested Solution\nTrust Protection Foundation 25.3  25.3.0 through 25.3.2  Upgrade to 25.3.3 or later.\nTrust Protection Foundation 25.1  25.1.0 through 25.1.7  Upgrade to 25.1.8 or later.\nTrust Protection Foundation 24.3  24.3.0 through 24.3.5  Upgrade to 24.3.6 or later.\nTrust Protection Foundation 24.1  24.1.0 through 24.1.12  Upgrade to 24.1.13 or later.",
                    "supportingMedia": [
                        {
                            "type": "text/html",
                            "base64": false,
                            "value": "<table class=\"tbl\"><tr><td>Version</td><td>Minor Version</td><td>Suggested Solution</td></tr><tr><td>Trust Protection Foundation 25.3</td><td>25.3.0 through 25.3.2</td><td>Upgrade to 25.3.3 or later.</td></tr><tr><td>Trust Protection Foundation 25.1</td><td>25.1.0 through 25.1.7</td><td>Upgrade to 25.1.8 or later.</td></tr><tr><td>Trust Protection Foundation 24.3</td><td>24.3.0 through 24.3.5</td><td>Upgrade to 24.3.6 or later.</td></tr><tr><td>Trust Protection Foundation 24.1</td><td>24.1.0 through 24.1.12</td><td>Upgrade to 24.1.13 or later.</td></tr></table>"
                        }
                    ]
                }
            ],
            "exploits": [
                {
                    "lang": "en",
                    "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue.",
                    "supportingMedia": [
                        {
                            "type": "text/html",
                            "base64": false,
                            "value": "<p>Palo Alto Networks is not aware of any malicious exploitation of this issue.</p>"
                        }
                    ]
                }
            ],
            "timeline": [
                {
                    "time": "2026-05-13T16:00:00.000Z",
                    "lang": "en",
                    "value": "Initial publication."
                }
            ],
            "credits": [
                {
                    "lang": "en",
                    "value": "Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue.",
                    "type": "other"
                }
            ],
            "source": {
                "discovery": "INTERNAL"
            },
            "x_generator": {
                "engine": "Vulnogram 0.1.0-dev"
            },
            "x_affectedList": [
                "Trust Protection Foundation 25.3.0",
                "Trust Protection Foundation 25.3.1",
                "Trust Protection Foundation 25.3.2",
                "Trust Protection Foundation 25.1.0",
                "Trust Protection Foundation 25.1.1",
                "Trust Protection Foundation 25.1.2",
                "Trust Protection Foundation 25.1.3",
                "Trust Protection Foundation 25.1.4",
                "Trust Protection Foundation 25.1.5",
                "Trust Protection Foundation 25.1.6",
                "Trust Protection Foundation 25.1.7",
                "Trust Protection Foundation 24.3.0",
                "Trust Protection Foundation 24.3.1",
                "Trust Protection Foundation 24.3.2",
                "Trust Protection Foundation 24.3.3",
                "Trust Protection Foundation 24.3.4",
                "Trust Protection Foundation 24.3.5",
                "Trust Protection Foundation 24.1.0",
                "Trust Protection Foundation 24.1.1",
                "Trust Protection Foundation 24.1.2",
                "Trust Protection Foundation 24.1.3",
                "Trust Protection Foundation 24.1.4",
                "Trust Protection Foundation 24.1.5",
                "Trust Protection Foundation 24.1.6",
                "Trust Protection Foundation 24.1.7",
                "Trust Protection Foundation 24.1.8",
                "Trust Protection Foundation 24.1.9",
                "Trust Protection Foundation 24.1.10",
                "Trust Protection Foundation 24.1.11",
                "Trust Protection Foundation 24.1.12"
            ]
        },
        "adp": [
            {
                "metrics": [
                    {
                        "other": {
                            "type": "ssvc",
                            "content": {
                                "timestamp": "2026-05-15T03:56:11.417596Z",
                                "id": "CVE-2026-0240",
                                "options": [
                                    {
                                        "Exploitation": "none"
                                    },
                                    {
                                        "Automatable": "no"
                                    },
                                    {
                                        "Technical Impact": "total"
                                    }
                                ],
                                "role": "CISA Coordinator",
                                "version": "2.0.3"
                            }
                        }
                    }
                ],
                "title": "CISA ADP Vulnrichment",
                "providerMetadata": {
                    "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
                    "shortName": "CISA-ADP",
                    "dateUpdated": "2026-05-15T09:56:36.574Z"
                }
            }
        ]
    }
}