Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OSĀ® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection.
Panorama and Cloud NGFW are not impacted by these issues.
References
| Link | Resource |
|---|---|
| https://security.paloaltonetworks.com/CVE-2026-0257 | Vendor Advisory |
| https://cert-portal.siemens.com/productcert/html/ssa-967325.html | Third Party Advisory |
| https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-0257 | US Government Resource |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
History
No history.
Information
Published : 2026-05-13 19:17
Updated : 2026-06-17 10:10
NVD link : CVE-2026-0257
Mitre link : CVE-2026-0257
CVE.ORG link : CVE-2026-0257
JSON object : View
Products Affected
siemens
- ruggedcom_ape1808_firmware
- ruggedcom_ape1808
paloaltonetworks
- pan-os
- prisma_access
CWE
CWE-565
Reliance on Cookies without Validation and Integrity Checking
