Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA
Ravie Lakshmanan reports: Palo Alto Networks has disclosed that it’s continuing to observe exploitation of a now-patched security flaw impacting PAN-OS and Prisma Access by ransomware actors. The activity relates to CVE-2026-0257 (CVSS score: 7.8), an authentication bypass flaw that could be exploited by bad actors to set up unauthorized VPN connections. It was patched...
- Vendor
- Palo Alto Networks
- Product
- PAN-OS, Prisma
- CVSS
- 7.8
- EPSS
- 0.95 (p100)
- Exploitation
- observed in the wild
- Exposure class
- Edge / VPN / firewall
Why it ranks 82 (Critical)
- Exploitation observed in the wild
- CVSS 7.8 high
- EPSS 0.95 (high probability of exploitation)
- Exposed product class: edge / VPN / firewall
- Widely deployed vendor product (Palo Alto Networks)
- Covered by 5 independent sources
- Reporting
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- DataBreaches.net (databreaches.net)
- CVE-2026-0257 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.