9.1

CVE-2026-0257

Warnung
Medienbericht

PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities

Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection.

Panorama and Cloud NGFW are not impacted by these issues.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Paloaltonetworks ≫ Pan-os Version < 10.2.7
Paloaltonetworks ≫ Pan-os Version 10.2.7 Update -
Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h1
Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h12
Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h16
Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h18
Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h19
Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h21
Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h24
Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h3
Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h32
Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h6
Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h8
Paloaltonetworks ≫ Pan-os Version 10.2.8
Paloaltonetworks ≫ Pan-os Version 10.2.9
Paloaltonetworks ≫ Pan-os Version 10.2.10 Update -
Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h10
Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h12
Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h14
Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h17
Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h18
Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h2
Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h21
Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h27
Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h3
Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h30
Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h31
Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h4
Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h5
Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h7
Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h9
Paloaltonetworks ≫ Pan-os Version 10.2.11
Paloaltonetworks ≫ Pan-os Version 10.2.12
Paloaltonetworks ≫ Pan-os Version 10.2.13 Update -
Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h1
Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h10
Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h16
Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h18
Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h2
Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h3
Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h4
Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h5
Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h7
Paloaltonetworks ≫ Pan-os Version 10.2.14
Paloaltonetworks ≫ Pan-os Version 10.2.15
Paloaltonetworks ≫ Pan-os Version 10.2.16 Update -
Paloaltonetworks ≫ Pan-os Version 10.2.16 Update h1
Paloaltonetworks ≫ Pan-os Version 10.2.16 Update h4
Paloaltonetworks ≫ Pan-os Version 10.2.16 Update h6
Paloaltonetworks ≫ Pan-os Version 10.2.17
Paloaltonetworks ≫ Pan-os Version 10.2.18 Update -
Paloaltonetworks ≫ Pan-os Version 10.2.18 Update h1
Paloaltonetworks ≫ Pan-os Version 10.2.18 Update h5
Paloaltonetworks ≫ Pan-os Version 11.1.0
Paloaltonetworks ≫ Pan-os Version 11.1.1
Paloaltonetworks ≫ Pan-os Version 11.1.2
Paloaltonetworks ≫ Pan-os Version 11.1.3
Paloaltonetworks ≫ Pan-os Version 11.1.4 Update -
Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h1
Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h13
Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h15
Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h16
Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h17
Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h18
Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h25
Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h27
Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h32
Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h4
Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h7
Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h9
Paloaltonetworks ≫ Pan-os Version 11.1.5
Paloaltonetworks ≫ Pan-os Version 11.1.6 Update -
Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h1
Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h10
Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h14
Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h17
Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h19
Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h2
Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h20
Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h21
Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h22
Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h23
Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h25
Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h29
Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h3
Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h4
Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h5
Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h6
Paloaltonetworks ≫ Pan-os Version 11.1.6 Update h7
Paloaltonetworks ≫ Pan-os Version 11.1.7 Update -
Paloaltonetworks ≫ Pan-os Version 11.1.7 Update h1
Paloaltonetworks ≫ Pan-os Version 11.1.7 Update h2
Paloaltonetworks ≫ Pan-os Version 11.1.7 Update h4
Paloaltonetworks ≫ Pan-os Version 11.1.8
Paloaltonetworks ≫ Pan-os Version 11.1.9
Paloaltonetworks ≫ Pan-os Version 11.1.10 Update -
Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h1
Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h10
Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h12
Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h21
Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h4
Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h5
Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h7
Paloaltonetworks ≫ Pan-os Version 11.1.10 Update h9
Paloaltonetworks ≫ Pan-os Version 11.1.11
Paloaltonetworks ≫ Pan-os Version 11.1.12
Paloaltonetworks ≫ Pan-os Version 11.1.13 Update -
Paloaltonetworks ≫ Pan-os Version 11.1.13 Update h1
Paloaltonetworks ≫ Pan-os Version 11.1.13 Update h2
Paloaltonetworks ≫ Pan-os Version 11.1.13 Update h3
Paloaltonetworks ≫ Pan-os Version 11.1.14 Update -
Paloaltonetworks ≫ Pan-os Version 11.2.0
Paloaltonetworks ≫ Pan-os Version 11.2.1
Paloaltonetworks ≫ Pan-os Version 11.2.2
Paloaltonetworks ≫ Pan-os Version 11.2.3
Paloaltonetworks ≫ Pan-os Version 11.2.4 Update -
Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h1
Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h10
Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h11
Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h12
Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h14
Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h15
Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h2
Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h4
Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h5
Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h6
Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h7
Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h8
Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h9
Paloaltonetworks ≫ Pan-os Version 11.2.5
Paloaltonetworks ≫ Pan-os Version 11.2.6
Paloaltonetworks ≫ Pan-os Version 11.2.7 Update -
Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h1
Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h10
Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h11
Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h12
Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h13
Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h2
Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h3
Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h4
Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h7
Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h8
Paloaltonetworks ≫ Pan-os Version 11.2.8
Paloaltonetworks ≫ Pan-os Version 11.2.9
Paloaltonetworks ≫ Pan-os Version 11.2.10 Update -
Paloaltonetworks ≫ Pan-os Version 11.2.10 Update h1
Paloaltonetworks ≫ Pan-os Version 11.2.10 Update h2
Paloaltonetworks ≫ Pan-os Version 11.2.10 Update h3
Paloaltonetworks ≫ Pan-os Version 11.2.10 Update h4
Paloaltonetworks ≫ Pan-os Version 11.2.10 Update h5
Paloaltonetworks ≫ Pan-os Version 11.2.10 Update h6
Paloaltonetworks ≫ Pan-os Version 11.2.11 Update -
Paloaltonetworks ≫ Pan-os Version 12.1.2
Paloaltonetworks ≫ Pan-os Version 12.1.3
Paloaltonetworks ≫ Pan-os Version 12.1.4 Update -
Paloaltonetworks ≫ Pan-os Version 12.1.4 Update h2
Paloaltonetworks ≫ Pan-os Version 12.1.4 Update h3
Paloaltonetworks ≫ Pan-os Version 12.1.4 Update h5
Paloaltonetworks ≫ Pan-os Version 12.1.5
Paloaltonetworks ≫ Pan-os Version 12.1.6
Paloaltonetworks ≫ Prisma Access Version -
   Paloaltonetworks ≫ Pan-os Version >= 10.2.0 < 10.2.10
   Paloaltonetworks ≫ Pan-os Version >= 11.2.0 < 11.2.7
   Paloaltonetworks ≫ Pan-os Version 10.2.10 Update -
   Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h10
   Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h12
   Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h14
   Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h17
   Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h18
   Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h2
   Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h21
   Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h27
   Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h3
   Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h30
   Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h31
   Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h4
   Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h5
   Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h7
   Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h9
   Paloaltonetworks ≫ Pan-os Version 11.2.7 Update -
   Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h1
   Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h10
   Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h11
   Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h12
   Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h2
   Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h3
   Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h4
   Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h7
   Paloaltonetworks ≫ Pan-os Version 11.2.7 Update h8
Siemens ≫ Ruggedcom Ape1808 Firmware Version -
   Siemens ≫ Ruggedcom Ape1808 Version -
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login

29.05.2026: CISA Known Exploited Vulnerabilities (KEV) Catalog

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

Schwachstelle

Palo Alto Networks PAN-OS contains an authentication bypass vulnerability that allows attackers to bypass security restrictions and establish an unauthorized VPN connection.

Beschreibung

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 93.91% 0.998
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.1 3.9 5.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
psirt@paloaltonetworks.com 7.8 0 0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:N/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:D/RE:M/U:Red
CWE-565 Reliance on Cookies without Validation and Integrity Checking

The product relies on the existence or values of cookies when performing security-critical operations, but it does not properly ensure that the setting is valid for the associated user.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
21.07.2026 16:15
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
21.07.2026 12:29
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
02.07.2026 10:14
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
01.07.2026 23:14
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
01.07.2026 22:29
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
15.06.2026 09:32
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
05.06.2026 12:48
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
05.06.2026 12:47
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
05.06.2026 12:47
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
05.06.2026 12:47
https://cert-portal.siemens.com/productcert/html/ssa-967325.html
Third Party Advisory
https://security.paloaltonetworks.com/CVE-2026-0257
Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-0257
US Government Resource