Palo Alto Warns of Active Exploitation of PAN-OS GlobalProtect VPN Flaw

Palo Alto Networks has confirmed active exploitation of CVE-2026-0257, an unauthenticated authentication-bypass vulnerability in the PAN-OS GlobalProtect VPN portal; the advisory warns that successful exploitation grants attackers VPN access equivalent to an authenticated user, enabling internal reconnaissance, lateral movement, credential harvesting, and malware/ransomware deployment, and urges immediate patching and mitigations.