CVE-2026-0257

Description

Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not impacted by these issues.

Scoring

• CVSS: 9.1 (CRITICAL, 3.1)
• EPSS exploitation probability: Not yet available
• EPSS percentile: Not yet available

CISA KEV status

• Added to KEV: 2026-05-29
• Remediation due date: 2026-06-01
• Known ransomware campaign use: Known

Weakness types (CWE)

• CWE-565

References

• https://security.paloaltonetworks.com/CVE-2026-0257
• https://cert-portal.siemens.com/productcert/html/ssa-967325.html
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-0257

More from Palo Alto Networks

• CVE-2026-0322 — PAN-OS
• CVE-2026-0300 — PAN-OS
• CVE-2025-0111 — PAN-OS
• CVE-2025-0108 — PAN-OS
• CVE-2024-3393 — PAN-OS