CVE-2026-0257 2

Vulnerability (CVE)

Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20)

Cyber Risks Unit 42 Palo Alto Networks Oct 20, 2026

Ransomware operators including Spikey Scorpius (aka Qilin) and Tarnished Scorpius (aka Inc) are exploiting PAN-OS vulnerability CVE-2026-0257. The post Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20) appeared first on Unit 42 .

Vulnerabilities & Patching

CVE-2026-0257: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog May 29, 2026

Palo Alto Networks PAN-OS contains an authentication bypass vulnerability that allows attackers to bypass security restrictions and establish an unauthorized VPN connection.

Vulnerabilities & Patching