CVE-2020-2021: PAN-OS SAML Security Bypass

**Executive Summary:** The report details CVE-2020-2021, a critical SAML signature verification bypass in Palo Alto PAN-OS that can allow unauthenticated access—especially against GlobalProtect VPNs—when SAML auth is enabled and the "Validate Identity Provider Certificate" option is disabled; it lists affected versions, mitigation (upgrade/Palo Alto guidance), monitoring logs for potential compromise, and notes no public proof-of-concept or confirmed exploitation to date.