Authentication bypass affecting PAN-OS and Prisma Access

PAN-OS is Palo Alto Networks' proprietary operating system designed to manage next-generation firewalls and secure network infrastructure. Prisma Access is the cloud-based SASE (Secure Access Service Edge) solution from the same organization. These systems are affected by a vulnerability labeled CVE-2026-0257 resulting from incorrect validation of authentication tokens within the GlobalProtect VPN portal. Exploitation of this vulnerability would allow an unauthenticated attacker to bypass authentication controls and gain unauthorized access to resources in the internal network. It is classified high with a severity score of 7.8 according to CVSS V3.1.

• PAN-OS 12.1 versions prior to 12.1.4-h6 and 12.1.7;
• PAN-OS 11.2 versions prior to 11.2.4-h17, 11.2.7-h14, 11.2.10-h7 and 11.2.12;
• PAN-OS 11.1 versions prior to 11.1.4-h33, 11.1.6-h32, 11.1.7-h6, 11.1.10-h25, 11.1.13-h5 and 11.1.15;
• PAN-OS 10.2 versions prior to 10.2.7-h34, 10.2.10-h36, 10.2.13-h21, 10.2.16-h7 and 10.2.18-h6;
• Prisma Access 11.2 versions prior to 11.2.7-h13;
• Prisma Access 10.2 versions prior to 10.2.10-h36;