⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AI-Powered Attacks, OAuth Phishing and More

Summary: Palo Alto Networks warned that CVE-2026-0257, a medium-severity authentication bypass in PAN-OS and Prisma Access with a CVSS score of 7.8, is under active exploitation in the wild and can be used to set up VPN connections. The flaw affects firewalls with GlobalProtect portal or gateway configured when authentication override cookies are enabled and a specific certificate configuration exists, and it appears on a weekly list of vulnerabilities that also includes Gitea, SharePoint, Chrome, GitLab, Oracle, Samba, PuTTY, 7-Zip and others.
Key Takeaway: A flaw rated only medium severity is already being exploited to establish VPN connections, which is the kind of access that turns a perimeter device into an entry point. The gap between a patch and an exploit is shrinking, and the cheap paths are the ones attackers reach for first.

Read the original at The Hacker News ↗

Topics: Endpoint & Network Security
Mentions: CVE-2025-59199 CVE-2026-0257 CVE-2026-1402 CVE-2026-2332 CVE-2026-27771 CVE-2026-32996 CVE-2026-32997 CVE-2026-3593 CVE-2026-40933 CVE-2026-4115 CVE-2026-4480 CVE-2026-44930 CVE-2026-44962 CVE-2026-45659 CVE-2026-46775 CVE-2026-46839 CVE-2026-46840 CVE-2026-47783 CVE-2026-48095 CVE-2026-4868 CVE-2026-48770 CVE-2026-48778 CVE-2026-48800 CVE-2026-5946 CVE-2026-5947 CVE-2026-6713 CVE-2026-8732 CVE-2026-9089 CVE-2026-9090 CVE-2026-9098 CVE-2026-9312 CVE-2026-9560 CVE-2026-9872 CVE-2026-9893
Related: PAN-OS Global Protect Authentication Bypass (CVE-2026-0257) Under Active Exploitation Cyber Risks ·
Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20) Cyber Risks · Oct 20, 2026
CVE-2026-45659: Microsoft Share Point Server Deserialization of Untrusted Data Vulnerability Known Exploited Vulnerabilities · Jul 01, 2026