PANW · News · 20261012N

Security Product Vulnerabilities

Palo Alto Networks Inc · 2026-10-12 · Importance 47 · Surprise 60

Ransomware groups Qilin and Settra are reportedly exploiting CVE-2026-0257 in Palo Alto Networks’ GlobalProtect VPN products. The high-severity vulnerability can enable unauthorized VPN sessions and initial network access while activity resembles legitimate remote work. Although Palo Alto Networks released a patch five months ago, organizations are being urged to upgrade affected systems, disable authentication-override cookies, terminate active GlobalProtect sessions, and investigate suspicious connections.

Key facts

• A high-severity vulnerability (CVE-2026-0257) in Palo Alto Networks VPN products is being actively exploited by ransomware groups like Qilin and Settra. source
• A patch for CVE-2026-0257 in Palo Alto Networks VPN products was released five months ago. source