CVE-2026-0257

Everything NetSec Observer has reported about CVE-2026-0257: 2 stories, newest first. Part of our Malware & Ransomware coverage.

Malware & Ransomware

Palo Alto Auth Bypass Lets Ransomware Groups Forge VPNs Ignoring May Patch

Ransomware groups are using an unpatched Palo Alto vulnerability to create unauthorized VPN sessions and access internal networks, despite fixes released months ago.

Oct 12, 2026

Vulnerabilities

Palo Alto GlobalProtect Auth Bypass CVE-2026-0257 Enables Stealthy Qilin Settra VPN Access

Ransomware groups Qilin and Settra are actively using an authentication bypass in Palo Alto Networks GlobalProtect to create stealthy, unauthorized VPN sessions.

Oct 12, 2026