Signalis
sign in--:--:--UTC
CVEs

CVE-2026-0257

exploited in the wild☆ pin
CVSS
7.8
Reports
17
First seen
May 14, 2026
Last seen
Jul 21, 2026
Affected product

PAN-OS

Associated actors

Qilin ×2GREYVIBE ×2BlackSuit ×1GlassWorm ×1JINX-0164 ×1Payload ×1Ababil of Minab ×1ShinyHunters ×1bandcampro ×1

Recent reports

High

Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access

The Hacker NewsCritical

Critical Palo Alto VPN bug now exploited by Qilin ransomware gang

Bleeping ComputerHigh

ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos

The Hacker NewsHigh

ChocoPoc malware delivered via trojanized exploits on GitHub

Bleeping ComputerHigh

ChocoPoC malware targets cybersecurity researchers via trojanized GitHub PoC exploits

Bleeping ComputerHigh

Palo Alto Warns of Active Exploitation of PAN-OS GlobalProtect VPN Flaw

The Hacker NewsHigh

Active Exploitation of PAN-OS CVE-2026-0257 GlobalProtect Authentication Bypass

Palo Alto Unit 42Critical

GlobalProtect Portal and Gateway Authentication Bypass Vulnerability (CVE-2026-0257)

NICS TaiwanCritical

Palo Alto Networks Authentication-Bypass Vulnerability Actively Exploited in Wild

CyberScoopHigh

Weekly Threat Intelligence Report – June 1st: Data Breaches, AI-Driven Threats, and Active CVE Exploitation

Check Point ResearchHigh

Weekly Cyber Recap: PAN-OS Exploit, Gogs RCE, GlassWorm C2 Takedown, AI-Driven Attacks

The Hacker NewsHigh

Palo Alto GlobalProtect VPN auth bypass flaw CVE-2026-0257 now exploited in attacks

Bleeping ComputerHigh

PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation

The Hacker NewsCritical

Palo Alto Networks PAN-OS Security Advisory – Multiple Vulnerabilities Including Active Exploitation

Canadian Centre AlertsHigh

CISA Adds CVE-2026-0257 Palo Alto Networks PAN-OS Authentication Bypass to Known Exploited Vulnerabilities Catalog

CISA AdvisoriesHigh

Multiple Vulnerabilities in Palo Alto Products – GovCERT.HK Alert A26-05-24

GovCERT.HKHigh

Palo Alto Products Multiple Vulnerabilities

HKCERT

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans