Vulnerability intelligence

CVE-2026-0257

Palo Alto Networks PAN-OS CWE-565

Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not impacted by these issues.

CVSS Score

7.8

High

EPSS — Exploit Probability

59%

Riskier than 98% of all CVEs

Exploitation

Confirmed in the wild

KEV since 2026-05-29

Remediation

Patch available

Federal deadline 2026-06-01

NVD entry Vendor patch PoC / advisory CISA KEV

16 articles across 10 outlets · first covered May 29, 2026 · latest Jun 5, 2026

Tracked incidents

vulnerability open 13 articles

Palo Alto PAN-OS CVE-2026-0257 exploited to bypass GlobalProtect VPN

Coverage timeline

Attackers Exploit PANOS Flaw to Bypass GlobalProtect VPN
unit42.paloaltonetworks.com · Jun 5, 2026
CVE-2026-0257 flaw lets hackers bypass Palo Alto VPN auth
www.darkreading.com · Jun 1, 2026
CVE-2026-0257 Cache Warmer RCE Bug Hits
securityonline.info · Jun 1, 2026
Palo Alto PANOS flaw exploited days after patch release
www.securityweek.com · Jun 1, 2026
CISA flags PAN-OS flaw CVE-2026-0257 as attackers bypass VPN auth
securityaffairs.com · Jun 1, 2026
Attackers Exploit CVE-2026-0257 in Palo Alto GlobalProtect VPN
www.infosecurity-magazine.com · Jun 1, 2026
Critical FreeBSD Kernel Buffer Overflow Disclosed: Public Details & PoC Out
securityonline.info · Jun 1, 2026
Critical Langroid Vulnerability Allows RCE via Prompt Injection
securityonline.info · Jun 1, 2026
CVE-2026-0257 flaw lets attackers hijack Palo Alto VPN logins
securityaffairs.com · May 31, 2026
CVE-2026-0257 flaw in MCP Toolbox allows site based session hijack
securityonline.info · May 31, 2026
PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation
thehackernews.com · May 30, 2026
Critical PANOS Flaw Lets Attackers Bypass Authentication
securityonline.info · May 30, 2026
CISA KEV Catalog flags Palo Alto PAN-OS auth bypass flaw
www.cisa.gov · May 29, 2026
CISA Adds Palo Alto PAN OS Auth Bypass CVE-2026-0257 to KEV List
www.cisa.gov · May 29, 2026
CISA Flags Palo Alto PAN OS Auth Bypass After Active Exploitation
cisa.gov · May 29, 2026
Rapid7 flags active CVE-2026-0257 exploits in PAN-OS GlobalProtect
www.rapid7.com · May 29, 2026

Related CVEs — Palo Alto Networks

CVE-2026-0300KEV