Palo Alto Networks PAN-OS Authentication Bypass VPN (CVE-2026-0257) | MSSP Advisory

Risk Assessment

CISA flagged CVE-2026-0257, an authentication bypass flaw in Palo Alto Networks PAN-OS that lets attackers establish unauthorized VPN connections without valid credentials. This is already on the Known Exploited Vulnerabilities catalog, meaning active exploitation is happening now.

Your MSSP infrastructure likely runs on Palo Alto firewalls for remote access and client network protection, making you a direct target for credential theft and lateral movement. Every client with Palo Alto devices faces immediate compromise risk, and failing to alert them creates a retention and liability exposure.