10/16/2026
💥 FLASH NOTICE 💥
CVE-2026-0257 is an authentication bypass vulnerability affecting Networks GlobalProtect in PAN-OS and Prisma Access. Attackers can exploit it to establish unauthorized VPN connections and gain access to internal networks.
Qilin and Settra are actively exploiting the flaw for credential theft, lateral movement, and deployment.
Organizations running vulnerable deployments should patch immediately and audit for unauthorized VPN sessions.
https://loom.ly/8g3wT_w