Critical alert in PAN-OS: active flaw in GlobalProtect

Published on May 30, 2026 | Translated from Spanish

A critical vulnerability identified as CVE-2026-0257 affects Palo Alto Networks' PAN-OS security system and is already being exploited by cybercriminals. The flaw allows authentication bypass in GlobalProtect, the tool used to access corporate networks. This exposes companies and users to personal data theft and potential service interruptions. Immediate patch application is essential.

cybersecurity breach visualization, hacker terminal screen showing GlobalProtect authentication bypass exploit in progress, network firewall interface with red alert indicators flashing, corporate server racks in background with data streams being intercepted, glowing padlock icon breaking apart, digital data packets flowing through compromised VPN tunnel, cinematic technical illustration, dark blue and red lighting, holographic security shield with crack lines, keyboard with green code scrolling, ultra-detailed hardware components, photorealistic engineering render, dramatic high-contrast lighting, action scene of cyber attack during authentication handshake

Technical details of the PAN-OS vulnerability 🔐

The CVE-2026-0257 vulnerability resides in the GlobalProtect authentication mechanism, allowing a remote attacker to bypass credential verification without user interaction. According to initial analyses, exploitation requires network access to the vulnerable device but no prior privileges. Palo Alto Networks has confirmed active attacks and recommends updating to patched versions of PAN-OS. Organizations must prioritize this fix to avoid security compromises.

Palo Alto: the firewall that forgot to close the door 🚪

It seems the Palo Alto Networks team left the back door open, and cybercriminals didn't hesitate to walk through. While network administrators rush to apply patches as if putting out a fire, attackers are already enjoying VIP access to corporate networks. Good thing the system is called GlobalProtect, because protect, as in actually protecting, this time it didn't protect much.