CVE-2026-0257KEV · OVERDUECWE-565

PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities

High · published May 13, 2026

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 99.9th percentile for exploit probability.

145
days past CISA
deadline
CVSS v4.0
7.8
EPSS
97%
Percentile
99.9
In the wild
Confirmed
What it is

Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection.

Panorama and Cloud NGFW are not impacted by these issues.

The record
Technical detail
CVSS v4.0
7.8 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:N/E:A/AU:N/R:A/V:D/RE:M/U:Red
EPSS
0.96895 · 99.9th percentile
Weakness
CWE-565 · Reliance on Cookies without Validation and Integrity Checking
Published
2026-05-13T18:15Z
KEV added
2026-05-29 · due 2026-06-01
EPSS history
Timeline
  • 29 MAY 00:00Z
    Added to CISA KEV — remediate by Jun 1
    kev
  • 13 MAY 18:15Z
    PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities
    cvelistv5