CVE-2026-0257
7.8 high
KEV · due 2026-06-01
ransomware
exploit ×7
SSVC exploitation: active
Analyzed
Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not impacted by these issues.
Fix
Public exploits 7
- 0xBlackash/CVE-2026-0257 PoC on GitHub
- Ez4rd1x1/CVE-2026-0257 PoC on GitHub
- HORKimhab/CVE-2026-0257 PoC on GitHub
- akashsingh0454/CVE-2026-0257-PoC PoC on GitHub
- grayxploit/CVE-2026-0257 PoC on GitHub
- sfewer-r7/CVE-2026-0257 PoC on GitHub
- tushargurav28/CVE-2026-0257 PoC on GitHub
Each line links to the index that lists it, never to exploit code. Exploit-DB's "verified" and a Metasploit rank of good or better count as verified; a PoC-in-GitHub entry is a repository's claim.
CISA KEV required action · due 2026-06-01
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Added to the catalog 2026-05-29. CISA KEV
Patch, vendor advisory and mitigation references on NVD 1
- https://security.paloaltonetworks.com/CVE-2026-0257 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
In the news 4
- Patch or Pass #1: Plex Media Server exploit chain now in CISA KEV, PAN-OS GlobalProtect (CVE-2026-0257) used by Qilin and Inc ransomware, plus 2 EOL boxes with no patch r/blueteamsec · 2026-10-22
- Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20) Unit 42 (Palo Alto Networks) · 2026-10-20
- Palo Alto's firewall OS has been under attack from multiple ransomware groups since June The Register · Security · 2026-10-20
- Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA The Hacker News · 2026-10-20
Change history 1
- First seenCVSS 7.8 · in KEV · paloaltonetworks, siemensNVD modified 2026-10-26 14:10
Affected (CPE criteria) 162
cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:-:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h1:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h12:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h16:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h18:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h19:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h21:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h24:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h3:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h32:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h6:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h8:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:*:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:*:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:-:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h10:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h12:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h14:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h17:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h18:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h2:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h21:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h27:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h3:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h30:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h31:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h4:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h5:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h7:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h9:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.11:*:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.12:*:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:-:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h1:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h10:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h16:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h18:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h2:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h3:*:*:*:*:*:*- and 122 more
References 3
- https://security.paloaltonetworks.com/CVE-2026-0257 Vendor Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-967325.html Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-0257 US Government Resource