AX·NEWS
Sign in

Vulnerability

CVE-2026-0257 — Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

high 7.8 Exploited in the wild Ransomware 1 story · 1 outlet

Official record (cve.org)NVDCVE watch

Impacted if

  • Palo Alto Networks PAN-OS < 12.1.7 · < 11.2.12 · < 11.1.15 +1
  • Palo Alto Networks Prisma Access < 10.2.10-h36 · < 11.2.7-h13

over the network · no login

Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized V

CISA Known Exploited Vulnerabilities

Added on 2026-05-29, federal remediation due 2026-06-01. Palo Alto Networks PAN-OS contains an authentication bypass vulnerability that allows attackers to bypass security restrictions and establish an unauthorized VPN connection.

Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

First seen by AX-NEWS · latest story . Severity: NVD, or the CVE record while the NVD has not scored it. This product uses data from the NVD API but is not endorsed or certified by the NVD.

Coverage

  1. Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA
    INThe Hacker News Cybersecurity

    Palo Alto Networks has disclosed that it's continuing to observe exploitation of a now-patched security flaw impacting PAN-OS and Prisma Access by ransomware actors. The activity relates to CVE-2026-0257 (CVSS score: 7.8), an…