{"uuid": "2fc11c2a-a357-4b05-ac06-ceb5e71c6017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0265", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/panos_cve_2026_0265.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Bishop Fox Team X\", \"Rapid7 Research / Deral Heiland adaptation\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module checks a PAN-OS GlobalProtect portal for CVE-2026-0265\\n          using the Bishop Fox scanner decision flow. It performs anonymous\\n          GET requests to the GlobalProtect prelogin endpoint, retrying transient\\n          failures and HTTP 503 responses, then checks\\n          whether CAS authentication is enabled, decodes the embedded SAML/JWT\\n          token when present, extracts PanOSversion, and compares it against\\n          the advisory version matrix.\", \"disclosure_date\": \"2026-05-21\", \"fullname\": \"auxiliary/scanner/http/panos_cve_2026_0265\", \"is_install_path\": true, \"mod_time\": \"2026-08-25 16:21:22 +0000\", \"name\": \"PAN-OS GlobalProtect CAS CVE-2026-0265 Vulnerability Checker\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/http/panos_cve_2026_0265.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/panos_cve_2026_0265\", \"references\": [\"CVE-2026-0265\", \"URL-https://security.paloaltonetworks.com/CVE-2026-0265\", \"URL-https://github.com/BishopFox/CVE-2026-0265-check\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:49.990716Z"}