Security researchers have observed active exploitation of CVE-2026-0300, a critical buffer overflow in GlobalProtect gateways.