Palo Alto Networks GlobalProtect Authentication Bypass: What Security Teams Should Know About CVE-2026-0257 

The report details CVE-2026-0257, an authentication-bypass vulnerability in Palo Alto Networks GlobalProtect portals and gateways that can accept forged authentication override cookies under specific certificate configurations, allowing unauthorized VPN access and potential internal network compromise; exploitation was observed in the wild and CISA listed the CVE in its Known Exploited Vulnerabilities catalog, prompting urgent upgrade and monitoring guidance for affected PAN-OS and Prisma Access deployments.