Vulnerability

CERT-In Vulnerability Note CIVN-2026-0285
Authentication Bypass Vulnerability in PAN-OS GlobalProtect

Original Issue Date:June 03, 2026

Severity Rating: CRITICAL

Software Affected

PAN-OS 12.1 versions prior to 12.1.4-h6 and 12.1.7
PAN-OS 11.2 versions prior to 11.2.4-h17, 11.2.7-h14, 11.2.10-h7 and 11.2.12
PAN-OS 11.1 versions prior to 11.1.4-h33, 11.1.6-h32, 11.1.7-h6, 11.1.10-h25, 11.1.13-h5 and 11.1.15
PAN-OS 10.2 versions prior to 10.2.7-h34, 10.2.10-h36, 10.2.13-h21, 10.2.16-h7 and 10.2.18-h6
Prisma Access 11.2.0 versions prior to 11.2.7-h13
Prisma Access 10.2.0 versions prior to 10.2.10-h36

Overview

A vulnerability has been reported in PAN-OS GlobalProtect that could allow a remote attacker to bypass security restrictions and establish an unauthorized VPN connection on the targeted system.

Target Audience:
Organizations, Enterprises, Managed Security Service Providers using PAN-OS based PA-Series and VM-Series firewalls.

Risk Assessment:
High risk of unauthorized access, data exposure.

Impact Assessment:
Potential for privilege escalation.

Description

PAN-OS GlobalProtect is Palo Alto Networks secure remote-access and Zero Trust Network Access (ZTNA) solution that enables authenticated users to securely connect to enterprise resources from any location while enforcing security policies.

A vulnerability has been reported in PAN-OS GlobalProtect due to authentication bypass flaw in the GlobalProtect portal and gateway.

Successful exploitation of this vulnerability could allow a remote attacker to bypass security restrictions on the targeted system.

Note: This vulnerability (CVE-2026-0257) is being actively exploited in the wild. Users are strongly advised to apply the latest patches immediately.

Solution

Apply appropriate updates as mentioned:
https://security.paloaltonetworks.com/CVE-2026-0257

Vendor Information

Palo Alto
https://security.paloaltonetworks.com/

References

https://security.paloaltonetworks.com/CVE-2026-0257

CVE Name
CVE-2026-0257

Disclaimer

The information provided herein is on "as is" basis, without warranty of any kind.

Contact Information

Email: info@cert-in.org.in
Phone: +91-11-22902657

Postal address

Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India