CERT24Old Palo Alto VPN Vulnerability Remains a Target for Ransomware GroupsLoading data…
CERT24Threat Observatory
Period

Old Palo Alto VPN Vulnerability Remains a Target for Ransomware Groups

According to ReliaQuest, the Qilin and Settra ransomware groups are actively targeting CVE-2026-0257 in Palo Alto Networks products to establish unauthorized VPN sessions and gain initial access to internal networks. Some systems appear to remain unpatched despite a security fix being released five months earlier.

← Back to intelligence

Old Palo Alto VPN Vulnerability Remains a Target for Ransomware Groups

According to ReliaQuest, the Qilin and Settra ransomware groups are actively targeting CVE-2026-0257 in Palo Alto Networks products to establish unauthorized VPN sessions and gain initial access to internal networks. Some systems appear to remain unpatched despite a security fix being released five months earlier.