← CVE Radar
CVE-2026-0257PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities
Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not impacted by these issues.
7.8 HIGHEPSS 95.64%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.8 | HIGH | 4.0palo_alto (CNA) | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:N/E:A/AU:N/R:A/V:D/RE:M/U:Red |
| 9.1 | CRITICAL | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
CISA required action
⚡ Known exploited · remediation due Jun 1, 2026
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Details
- CVE ID
- CVE-2026-0257
- Status
- Analyzed
- Assigner (CNA)
- palo_alto
- Published
- May 13, 2026
- Last modified
- 2026-10-26 14:10 UTC
- Weaknesses
- CWE-565 · Reliance on Cookies without Validation and Integrity Checking
Affected Products
As published by the CNA in the CVE record.
Palo Alto NetworksCloud NGFW0 version ranges
No version detail published.
Palo Alto NetworksPAN-OS4 version ranges
- 12.1.0 before 12.1.7, 12.1.4-h6
- 11.2.0 before 11.2.12, 11.2.10-h7, 11.2.7-h14, 11.2.4-h17
- 11.1.0 before 11.1.15, 11.1.13-h5, 11.1.10-h25, 11.1.7-h6, 11.1.6-h32, 11.1.4-h33
- 10.2.0 before 10.2.18-h6, 10.2.16-h7, 10.2.13-h21, 10.2.10-h36, 10.2.7-h34
Palo Alto NetworksPrisma Access2 version ranges
- 10.2.0 before 10.2.10-h36
- 11.2.0 before 11.2.7-h13