#CVE-2026-0257
Ransomware Crews Exploit GlobalProtect Bypass to Enter Networks Through Trusted VPNs
Multiple ransomware groups are exploiting CVE-2026-0257 to establish unauthorized GlobalProtect VPN sessions. Defenders should patch every affected component, invalidate active sessions, and investigate post-login activity for signs of...
Palo Alto GlobalProtect VPN Authentication Bypass CVE-2026-0257 Under Active Exploitation — Patch Now
Palo Alto Networks has confirmed active exploitation of CVE-2026-0257, a critical authentication bypass in GlobalProtect portal and gateway components that lets unauthenticated attackers establish unauthorized VPN sessions. CISA...