Medium severity · published May 13, 2026
CVE-2026-0242
Trust Protection Foundation: SQL Injection Vulnerability
6.1
CVSS
0.2%
EPSS
No
On KEV
Description
A SQL injection vulnerability in Trust Protection Foundation allows an authenticated attacker to execute arbitrary SQL commands against the product database. Successful exploitation could allow an attacker to read sensitive data, modify database contents, and escalate privileges to gain full administrative control of the platform.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 16% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TP
Trust Protection Foundation · Palo Alto Networks
25.3.0 before 25.3.3; 25.1.0 before 25.1.8; 24.3.0 before 24.3.6; 24.1.0 before 24.1.13 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-0242
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-0242
security.paloaltonetworks.com
https://security.paloaltonetworks.com/CVE-2026-0242
More from Trust Protection Foundation
8.7
CVE-2026-0240
Trust Protection Foundation: Sensitive Information Disclosure Vulnerability
7.2
CVE-2026-0241
Trust Protection Foundation: Multiple Authorization Bypass Vulnerabilities