critical
CISA KEV
Ransomware
CVE-2026-0257
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
Description
Palo Alto Networks PAN-OS contains an authentication bypass vulnerability that allows attackers to bypass security restrictions and establish an unauthorized VPN connection.
Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Federal remediation due Jun 1, 2026 — past due
Advertisement
Coverage
- CVE-2026-0257: PAN-OS GlobalProtect Auth Bypass Exploited
Nov 1, 2026
- CVE-2026-0257: Palo Alto Networks PAN-OS GlobalProtect Bypass Active
Jun 15, 2026
- CVE-2026-0257: PAN-OS GlobalProtect Auth Bypass Under Exploitation
May 30, 2026
- CVE-2026-0257: Palo Alto PAN-OS Auth Bypass Under Active Attack
May 29, 2026