← Back to browse · API

CVE-2026-0257

Severity
HIGH
CVSS
7.8
EPSS
0.93905
Risk score
57.87
CISA KEV
Yes
PoC
Yes
Published
2026-05-13
Modified
2026-07-14
First seen
2026-08-07
Aliases
EUVD-2026-30104, GHSA-JQXW-84HX-6QJ5
Products
Palo Alto Networks:PAN-OS, Palo Alto Networks:PAN-OS 10.2.0 <10.2.18-h6, 10.2.16-h7, 10.2.13-h21, 10.2.10-h36, 10.2.7-h34, Palo Alto Networks:PAN-OS 11.1.0 <11.1.15, 11.1.13-h5, 11.1.10-h25, 11.1.7-h6, 11.1.6-h32, 11.1.4-h33, Palo Alto Networks:PAN-OS 11.2.0 <11.2.12, 11.2.10-h7, 11.2.7-h14, 11.2.4-h17, Palo Alto Networks:PAN-OS 12.1.0 <12.1.7, 12.1.4-h6, Palo Alto Networks:Prisma Access 10.2.0 <10.2.10-h36, Palo Alto Networks:Prisma Access 11.2.0 <11.2.7-h13, unix
Sources
cisa.gov CVE-2026-0257
euvd EUVD-2026-30104
packetstorm e1b15243aca2ad53b47ce4cf|CVE-2026-0257
packetstorm 6800b2515a9d1e1e2b76b40b|CVE-2026-0257
packetstorm 8886167b1d29a722463d1848|CVE-2026-0257

Description

Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not impacted by these issues.

References