CVE-2026-0257
Analyzed Analyzed - Analysis Complete

BaseFortify

Vulnerability report for CVE-2026-0257, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-05-13

Last updated on: 2026-06-09

Assigner: Palo Alto Networks, Inc.

Description

Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OSยฎ software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not impacted by these issues.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-05-13
Last Modified
2026-06-09
Generated
2026-06-30
EPSS Evaluated
2026-06-28
NVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
siemens ruggedcom_ape1808_firmware *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-565 The product relies on the existence or values of cookies when performing security-critical operations, but it does not properly ensure that the setting is valid for the associated user.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
AI Quick Actions have not been generated yet.

Chat Assistant

Ask questions about this CVE
Hi! Iโ€™m here to help you understand CVE-2026-0257. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart