Palo Alto Networks PAN-OS GlobalProtect Auth Bypass
Attackers are actively exploiting a PAN-OS GlobalProtect authentication bypass vulnerability to gain unauthorized VPN access to exposed Palo Alto Networks firewalls. An attacker who successfully exploits CVE-2026-0257 can: - Establish unauthorized VPN sessions through affected GlobalProtect gateways. - Bypass authentication controls without valid user credentials. - Gain network-level access typically reserved for authenticated VPN users. - Potentially facilitate further reconnaissance, lateral movement, or follow-on attacks within the victim environment.
Read at FortiGuard Outbreak Alerts
- Vendor
- Palo Alto Networks
- Product
- PAN-OS, GlobalProtect
- EPSS
- 0.95 (p100)
- Exploitation
- observed in the wild
- Exposure class
- Edge / VPN / firewall
Why it ranks 78 (Critical)
- Exploitation observed in the wild
- EPSS 0.97 (high probability of exploitation)
- Exposed product class: edge / VPN / firewall
- Widely deployed vendor product (Palo Alto Networks)
- Covered by 5 independent sources
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- FortiGuard Outbreak Alerts (fortiguard.fortinet.com)
- CVE-2026-0257 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.