CVE-2026-0242 — Trust Protection Foundation: SQL Injection Vulnerability

CVE-2026-0242

Trust Protection Foundation: SQL Injection Vulnerability PUBLISHED

Description (CNA)

A SQL injection vulnerability in Trust Protection Foundation allows an authenticated attacker to execute arbitrary SQL commands against the product database. Successful exploitation could allow an attacker to read sensitive data, modify database contents, and escalate privileges to gain full administrative control of the platform.

Affected (CNA)

Vendor / product	Versions
Palo Alto Networks / Trust Protection Foundation	affected 25.3.0 before 25.3.3; affected 25.1.0 before 25.1.8; affected 24.3.0 before 24.3.6; affected 24.1.0 before 24.1.13

CWE

CWE-89

References

https://security.paloaltonetworks.com/CVE-2026-0242

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.