Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20)
Ransomware operators including Spikey Scorpius (aka Qilin) and Tarnished Scorpius (aka Inc) are exploiting PAN-OS vulnerability CVE-2026-0257. The post Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20) appeared first on Unit 42 .
Read at Palo Alto Networks Unit 42
- Vendor
- Palo Alto Networks
- Product
- PAN-OS
- EPSS
- 0.95 (p100)
- Exploitation
- observed in the wild
- Exposure class
- Edge / VPN / firewall
Why it ranks 74 (Critical)
- Exploitation observed in the wild
- EPSS 0.97 (high probability of exploitation)
- Exposed product class: edge / VPN / firewall
- Widely deployed vendor product (Palo Alto Networks)
- Covered by 5 independent sources
- Threat research
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Palo Alto Networks Unit 42 (unit42.paloaltonetworks.com)
- CVE-2026-0257 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.