sign in--:--:--UTC

CVE-2026-0257

exploited in the wild

CVSS

7.8

Reports

12

First seen

May 14

Last seen

Jun 15

Affected product

Palo Alto Networks PAN-OS GlobalProtect portal and gateway

Associated actors

GREYVIBE ×2 bandcampro ×1 BlackSuit ×1 GlassWorm ×1 JINX-0164 ×1 Payload ×1 Ababil of Minab ×1 ShinyHunters ×1

Recent reports

Palo Alto Warns of Active Exploitation of PAN-OS GlobalProtect VPN Flaw

The Hacker NewsJun 15 High

Active Exploitation of PAN-OS CVE-2026-0257 GlobalProtect Authentication Bypass

Palo Alto Unit 42Jun 5 Critical

GlobalProtect Portal and Gateway Authentication Bypass Vulnerability (CVE-2026-0257)

NICS TaiwanJun 5 Critical

Palo Alto Networks Authentication-Bypass Vulnerability Actively Exploited in Wild

CyberScoopJun 2 High

Weekly Threat Intelligence Report – June 1st: Data Breaches, AI-Driven Threats, and Active CVE Exploitation

Check Point ResearchJun 1 High

Weekly Cyber Recap: PAN-OS Exploit, Gogs RCE, GlassWorm C2 Takedown, AI-Driven Attacks

The Hacker NewsJun 1 High

Palo Alto GlobalProtect VPN auth bypass flaw CVE-2026-0257 now exploited in attacks

Bleeping ComputerMay 30 High

PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation

The Hacker NewsMay 30 Critical

Palo Alto Networks PAN-OS Security Advisory – Multiple Vulnerabilities Including Active Exploitation

Canadian Centre AlertsMay 29 High

CISA Adds CVE-2026-0257 Palo Alto Networks PAN-OS Authentication Bypass to Known Exploited Vulnerabilities Catalog

CISA AdvisoriesMay 29 High

Multiple Vulnerabilities in Palo Alto Products – GovCERT.HK Alert A26-05-24

GovCERT.HKMay 14 High

Palo Alto Products Multiple Vulnerabilities

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans