Palo Alto PAN-OS Zero-Day Exploited to Run Code as Root
Palo Alto Networks says attackers have begun exploiting CVE-2026-0322, a PAN-OS management-interface flaw that enables root-level code execution. Administrators should install a fixed release immediately and investigate access...
Ransomware Crews Exploit GlobalProtect Bypass to Enter Networks Through Trusted VPNs
Multiple ransomware groups are exploiting CVE-2026-0257 to establish unauthorized GlobalProtect VPN sessions. Defenders should patch every affected component, invalidate active sessions, and investigate post-login activity for signs of...
Qilin Ransomware Affiliates Exploit Palo Alto Firewall Bypass to Skip Straight Past Perimeter Defenses
A critical PAN-OS authentication bypass, CVE-2026-0257, is being actively exploited by Qilin ransomware affiliates to gain direct VPN access to corporate networks. Arctic Wolf Labs traced multiple June...
CVE-2026-0257: Palo Alto PAN-OS Authentication Bypass Actively Exploited — Patch Immediately
A critical authentication bypass in Palo Alto Networks PAN-OS (CVE-2026-0257) is being actively exploited in two distinct waves, with attackers forging GlobalProtect VPN session cookies to gain unauthorized...
Critical Palo Alto PAN-OS Vulnerability CVE-2026-0300 Actively Exploited — Unauthenticated Root RCE on Firewalls
Palo Alto Networks is warning of a critical CVE-2026-0300 buffer overflow in PAN-OS Captive Portal that enables unauthenticated root-level remote code execution on PA-Series and VM-Series firewalls. Active...
Critical Palo Alto PAN-OS Zero-Day CVE-2026-0300 Actively Exploited — Root Access Granted on 5,800+ Exposed Firewalls
A critical buffer overflow zero-day in Palo Alto Networks PAN-OS (CVE-2026-0300, CVSS 9.3) is being actively exploited in the wild. Unauthenticated attackers can gain full root access to...