Exploitation active confirmée

Ajoutée au catalogue CISA KEV le 29/05/2026, correctif exigé avant le 01/06/2026 pour les agences fédérales américaines.

Action requise : Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Description officielle (NVD)

Palo Alto Networks PAN-OS contains an authentication bypass vulnerability that allows attackers to bypass security restrictions and establish an unauthorized VPN connection.

Preuves de concept publiques (7)

Dépôts tiers non vérifiés, parfois piégés. Ne les exécutez jamais en production : uniquement dans un environnement de test isolé.

sfewer-r7/CVE-2026-0257 · ★ 30 · 29/05/2026
Proof-of-concept script to leverage the PAN-OS GlobalProtect authentication bypass CVE-2026-0257
0xBlackash/CVE-2026-0257 · ★ 3 · 30/05/2026
CVE-2026-0257
tushargurav28/CVE-2026-0257 · ★ 3 · 03/06/2026
Palo Alto Networks PAN-OS contains an authentication bypass caused by flaws in the GlobalProtect portal and gateway, letting attackers establish unauthorized VPN connections, exploit requires network
akashsingh0454/CVE-2026-0257-PoC · ★ 2 · 29/05/2026
grayxploit/CVE-2026-0257 · ★ 2 · 10/06/2026
GrayXploit Security research and defensive team validate this toolkit for CVE-2026-0257 (PAN-OS GlobalProtect Authentication Bypass). Includes vulnerability assessment, detection guidance, technical a
HORKimhab/CVE-2026-0257 · ★ 0 · 30/05/2026
CVE-2026-0257 - PAN-OS
Ez4rd1x1/CVE-2026-0257 · ★ 0 · 15/06/2026
testing