Palo Alto Networks warns of active exploitation in GlobalProtect VPN bypass (opens in new tab)

Palo Alto Networks has upgraded the severity of a vulnerability in its PAN-OS software following reports of active exploitation in the wild. The flaw, tracked as CVE-2026-0257, allows attackers to bypass security restrictions and establish unauthorized VPN connections to corporate networks. While initially rated as medium severity, the discovery of successful attacks has prompted a reclassification to high urgency. <a href="