Vulnerabilities CVE-2026-0257

CVE-2026-0257

High

Open

KEV

TLP:CLEAR

PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities

NVD CVE.org

Critical Infrastructure

AI Analysis

No AI analysis yet.

Description

Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not impacted by these issues.

Details

CVSS Score: 7.8
EPSS Score ⓘ: 93.91%

99.8th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:N/E:A/AU:N/R:A/V:D/RE:M/U:Red
Confidence: 100%
Published: May 13, 2026
Last Modified: Jul 14, 2026
CISA KEV
Date Added: May 29, 2026
Patch Due: Jun 1, 2026
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.