Patch Now: Another Palo Alto Auth Bypass Bug Under Active Exploit

Attackers are actively exploiting CVE-2026-0257, an authentication-bypass flaw in Palo Alto Networks PAN-OS GlobalProtect that can allow forged authentication-override cookies to establish VPN sessions without valid credentials; Rapid7 demonstrated a PoC and observed successful exploitation across multiple customers, and CISA added the flaw to its KEV catalog — operators should apply vendor patches or disable authentication-override and use dedicated certificates immediately.