Network Automation Reference

CVE-2026-0257 PAN-OS GlobalProtect Auth Bypass: Fixed Versions, Mitigation and Log Hunting

CVE-2026-0257

Published: June 11, 2026 | Updated: October 29, 2026 | Affects: PAN-OS GlobalProtect portal and gateway, Prisma Access | CVSS v4: 7.8 (High) | CISA KEV: added May 29, 2026, ransomware use “Known” CVE-2026-0257 lets an unauthenticated attacker open a GlobalProtect VPN connection by presenting a forged authentication override cookie. This page is a working … Read more