中文

// CVE · PUBLISHED 2026-05-13

CVE-2026-0257

Palo Alto Networks / Cloud NGFW · Palo Alto Networks / PAN-OS · Palo Alto Networks / Prisma Access · +1

7.8 · CVSS 4.0HighCISA KEV

CISA lists this CVE as exploited in the wild. Patch it before anything rated by score alone.

Description

Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not impacted by these issues.

OhShit! incidents

References

Related CVEs

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.