Skip to content

PaloAlto Authentication Bypass Vulnerability - 20260603004

Overview

Palo Alto Networks has released information regarding a critical authentication bypass vulnerability affecting PAN-OS GlobalProtect portal and gateway components. This vulnerability allows unauthenticated attackers to bypass authentication mechanisms and establish unauthorized VPN connections to affected systems.

What is vulnerable?

Product(s) and Versions Affected CVE CVSS Severity
Vendor listed affected items CVE-2026-0257 9.1 Critical

What has been observed?

Palo Alto Networks has confirmed limited exploitation attempts targeting unpatched PAN‑OS devices without mitigations applied. The WASOC has not received any reports of exploitation of this vulnerability on Western Australian Government networks at the time of writing.

Recommendation

The WASOC recommends administrators apply the solutions as per vendor instructions to all affected devices within expected timeframes (refer Patch Management):