CVE record · 5 sources
CVE-2026-0257
KEVCVSS 7.8Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
- Vendor
- Palo Alto Networks
- Product
- PAN-OS
- CVSS
- 7.8
- EPSS
- 0.95 (p100)
- CISA KEV
- listed
- Exposure class
- Edge / VPN / firewall
Coverage
5Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
Palo Alto Networks PAN-OS contains an authentication bypass vulnerability that allows attackers to bypass security restrictions and establish an unauthorized VPN connection.
-
Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA
Ravie Lakshmanan reports: Palo Alto Networks has disclosed that it’s continuing to observe exploitation of a now-patched security flaw impacting PAN-OS and Prisma Access by ransomware actors. The activity relates to CVE-2026-0257…
-
Palo Alto Networks PAN-OS GlobalProtect Auth Bypass
Attackers are actively exploiting a PAN-OS GlobalProtect authentication bypass vulnerability to gain unauthorized VPN access to exposed Palo Alto Networks firewalls. An attacker who successfully exploits CVE-2026-0257 can…
-
Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20)
Ransomware operators including Spikey Scorpius (aka Qilin) and Tarnished Scorpius (aka Inc) are exploiting PAN-OS vulnerability CVE-2026-0257. The post Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20)…
-
Palo Alto's firewall OS has been under attack from multiple ransomware groups since June
Unit 42 investigates network compromises across numerous industries