Palo Alto PAN-OS CVE-2026-0257 Authentication Bypass Exploited for Weeks

CVE-2026-0257, an authentication bypass vulnerability in Palo Alto Networks PAN-OS, has been under active exploitation for weeks — with attackers beginning exploitation just four days after public disclosure. Authentication bypasses in PAN-OS carry high impact given the device’s role as a network perimeter control point. Palo Alto Networks customers should verify their PAN-OS versions and apply available patches immediately. Exposed management interfaces should be reviewed and restricted to trusted IP ranges as a mitigating control.