CVE-2026-0257—Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

Vulnerability Name

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

Description

Palo Alto Networks PAN-OS contains an authentication bypass vulnerability that allows attackers to bypass security restrictions and establish an unauthorized VPN connection.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:

Unknown

Action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Additional Notes

• https://security.paloaltonetworks.com/CVE-2026-0257
• https://nvd.nist.gov/vuln/detail/CVE-2026-0257

Related News Articles

• New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit ReposJuly 2, 2026
• Palo Alto Warns of Active Exploitation of PAN-OS GlobalProtect VPN FlawJune 15, 2026
• Hackers are exploiting Palo Alto GlobalProtect VPN authentication bypass (CVE-2026-0257)June 1, 2026
• Palo Alto GlobalProtect VPN auth bypass flaw now exploited in attacksMay 30, 2026
• PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active ExploitationMay 30, 2026

Related Weaknesses

• CWE-565