critical9.1Known exploited
CVE-2026-0257
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
Exploited in the wild
This vulnerability is on the CISA Known Exploited Vulnerabilities list, added 2026-05-29. Federal due date: 2026-06-01.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Impact
Palo Alto Networks PAN-OS contains an authentication bypass vulnerability that allows attackers to bypass security restrictions and establish an unauthorized VPN connection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Paloaltonetworks | Pan-Os | before 10.2.7 Versions 10.2.7, 10.2.8, 10.2.9, 10.2.10, 10.2.11 |
| Paloaltonetworks | Prisma Access | All versions |
| Siemens | Ruggedcom Ape1808 Firmware | All versions |