CVE-2026-0257: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability — Fixed versions

Summary

Palo Alto Networks PAN-OS contains an authentication bypass vulnerability that allows attackers to bypass security restrictions and establish an unauthorized VPN connection.

Remediation

Inventory every Palo Alto Networks PAN-OS deployment, including staging.
Upgrade Palo Alto Networks PAN-OS to the fixed version for your release line, listed under Affected versions.
Confirm the running version after the upgrade.
Review logs from before the change for signs of exploitation.

CISA required actionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

References

Advisoryhttps://security.paloaltonetworks.com/CVE-2026-0257
Advisoryhttps://nvd.nist.gov/vuln/detail/CVE-2026-0257
Referencehttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-0257
Referencehttps://cert-portal.siemens.com/productcert/html/ssa-967325.html

Version	Fixed in
10.2.0 – <10.2.10-h36	10.2.10-h36
11.2.0 – <11.2.7-h13	11.2.7-h13