CVE-2026-0257
KEV · RansomwarePalo Alto Networks PAN-OS Authentication Bypass Vulnerability
View CVE record →- Vendor / Project
- Palo Alto Networks
- Product
- PAN-OS
- Date added
- May 29, 2026
- Due date
- Jun 1, 2026
- Known ransomware use
- Known
- CWEs
- CWE-565
Description
Palo Alto Networks PAN-OS contains an authentication bypass vulnerability that allows attackers to bypass security restrictions and establish an unauthorized VPN connection.
Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.