Palo Alto Warns of Active Exploitation of PAN-OS GlobalProtect VPN Flaw

Palo Alto Networks has issued a critical security alert that demands immediate attention from cybersecurity professionals worldwide. The company has confirmed active exploitation of a vulnerability in its PAN-OS software, specifically targeting GlobalProtect VPN services—a component that thousands of organizations rely upon for secure remote access. This development underscores the persistent threat landscape facing enterprise security infrastructure, even from widely trusted vendors.

The vulnerability in question, tracked as CVE-2026-0257 with a CVSS score of 7.8, represents a significant authentication bypass flaw within the portal and gateway components of PAN-OS. According to Palo Alto's security advisory, an unidentified threat actor has been actively exploiting this weakness to gain unauthorized access to GlobalProtect portals. The authentication bypass nature of this vulnerability is particularly concerning, as it potentially allows attackers to circumvent standard security controls and compromise the integrity of VPN connections.

Organizations utilizing Palo Alto Networks firewalls with enabled GlobalProtect VPN services are directly affected by this threat. Given the critical role VPNs play in enabling secure remote workforce connectivity, especially in hybrid