Palo Alto GlobalProtect VPN authentication bypass flaw actively exploited in attacks

Palo Alto Networks warns that CVE-2026-0257, an authentication bypass vulnerability in PAN-OS GlobalProtect, is being exploited in attacks against unpatched devices. The flaw may allow an unauthorized VPN connection to be established. Palo Alto Networks raised the rating from Medium to High, and CISA added the vulnerability to its Known Exploited Vulnerability catalog.