Critical severity9.1CISA KEVNVD Advisory· Published May 13, 2026· Updated Jun 17, 2026
CVE-2026-0257
CVE-2026-0257
Description
Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection.
Panorama and Cloud NGFW are not impacted by these issues.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
164- cpe:2.3:a:paloaltonetworks:prisma_access:-:*:*:*:*:*:*:*
cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*+ 160 more
- cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*range: <10.2.7
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:-:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h10:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h12:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h14:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h17:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h18:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h21:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h27:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h2:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h30:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h31:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h3:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h4:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h5:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h7:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h9:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.11:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.12:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:-:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h10:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h16:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h18:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h1:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h2:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h3:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h4:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h5:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h7:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.14:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.15:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:-:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h1:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h4:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h6:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.17:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:-:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h1:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h5:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:-:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h12:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h16:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h18:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h19:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h1:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h21:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h24:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h32:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h3:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h6:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h8:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:-:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h10:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h12:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h1:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h21:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h4:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h5:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h7:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h9:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.11:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.12:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:-:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h1:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h2:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h3:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.14:-:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.1:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.3:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:-:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h13:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h15:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h16:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h17:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h18:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h1:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h25:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h27:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h32:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h4:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h7:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h9:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.5:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:-:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h10:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h14:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h17:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h19:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h1:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h20:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h21:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h22:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h23:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h25:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h29:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h2:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h3:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h4:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h5:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h6:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h7:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:-:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h1:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h2:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h4:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.8:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.1.9:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.0:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:-:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h1:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h2:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h3:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h4:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h5:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h6:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.11:-:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.1:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.2:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.3:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:-:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h10:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h11:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h12:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h14:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h15:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h1:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h2:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h4:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h5:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h6:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h7:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h8:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h9:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.5:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.6:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:-:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h10:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h11:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h12:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h13:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h1:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h2:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h3:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h4:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h7:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h8:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.8:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.9:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:12.1.2:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:12.1.3:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:-:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h2:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h3:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h5:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:12.1.5:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:12.1.6:*:*:*:*:*:*:*
- (no CPE)
- cpe:2.3:o:siemens:ruggedcom_ape1808_firmware:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
3- cert-portal.siemens.com/productcert/html/ssa-967325.htmlnvdThird Party Advisory
- security.paloaltonetworks.com/CVE-2026-0257nvdVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
27- Ransomware Gangs Attack Palo Alto, Fortinet, Citrix, and Check Point VPNs to Target Corporate NetworksCyber Security News · Jul 27, 2026
- Weekly Cyber Security Newsletter Bulletin – Certighost Exploit, Checkpoint 0-day, HTTP/2 Flaw, Notepad++ Plugin Abuse +20 StoriesCyber Security News · Jul 26, 2026
- Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial AccessThe Hacker News · Jul 21, 2026
- Critical Palo Alto VPN bug now exploited by Qilin ransomware gangBleepingComputer · Jul 21, 2026
- Hackers Exploiting Palo Alto’s PAN-OS Vulnerability to Deploy Qilin RansomwareCyber Security News · Jul 21, 2026
- New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit ReposThe Hacker News · Jul 2, 2026
- New ChocoPoC malware targets researchers via trojanized PoC exploitsBleepingComputer · Jul 1, 2026
- ChocoPoc malware delivered via trojanized exploits on GitHubBleepingComputer · Jul 1, 2026
- Palo Alto Warns of GlobalProtect VPN Vulnerability Actively Exploited in the WildCyber Security News · Jun 15, 2026
- Palo Alto Warns of Active Exploitation of PAN-OS GlobalProtect VPN FlawThe Hacker News · Jun 15, 2026
- Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257Unit 42 · Jun 9, 2026
- Week in review: Cisco SD-WAN 0-day exploited, Patch Tuesday forecastHelp Net Security · Jun 7, 2026
- The Good, the Bad and the Ugly in Cybersecurity – Week 23SentinelOne Labs · Jun 5, 2026
- CISA Flags Palo Alto Networks PAN-OS Vulnerability as Exploited in AttacksCyber Security News · Jun 2, 2026
- Attackers are exploiting Palo Alto Networks defect that initially flew under the radarCyberScoop · Jun 1, 2026
- 1st June – Threat Intelligence ReportCheck Point Research · Jun 1, 2026
- Patch Now: Another Palo Alto Auth Bypass Bug Under Active ExploitDark Reading · Jun 1, 2026
- ⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AI-Powered Attacks, OAuth Phishing and MoreThe Hacker News · Jun 1, 2026
- Palo Alto VPN bug graduates from advisory to active exploitationThe Register Security · Jun 1, 2026
- Recent Palo Alto Networks Vulnerability Exploited for WeeksSecurityWeek · Jun 1, 2026
- Hackers are exploiting Palo Alto GlobalProtect VPN authentication bypass (CVE-2026-0257)Help Net Security · Jun 1, 2026
- Palo Alto Warns High-Severity Bug Is Being Actively ExploitedInfosecurity Magazine · Jun 1, 2026
- Palo Alto GlobalProtect VPN auth bypass flaw now exploited in attacksBleepingComputer · May 30, 2026
- PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active ExploitationThe Hacker News · May 30, 2026
- Palo Alto Networks PAN-OS Authentication Vulnerability Bypass Exploited in the WildCyber Security News · May 30, 2026
- Rapid7 Observed Exploitation of PAN-OS GlobalProtect Authentication Bypass Vulnerability (CVE-2026-0257)Rapid7 Blog · May 29, 2026
- CISA Adds One Known Exploited Vulnerability to CatalogCISA Alerts