Palo Alto patches exploited PAN-OS RCE CVE-2026-0322
Palo Alto patched CVE-2026-0322, an authenticated RCE in the PAN-OS management interface rated CVSS 8.6, after observing limited exploitation. Restrict the interface and upgrade now.
Stories tagged: #palo-alto
Arctic Wolf ties CVE-2026-0257 GlobalProtect bypass to Qilin ransomware
Arctic Wolf documented Qilin ransomware deployments through Palo Alto CVE-2026-0257 in June — six weeks after Rapid7 first flagged the auth-bypass exploitation and CISA added the CVE to KEV.
Palo Alto GlobalProtect auth bypass (CVE-2026-0257) added to CISA KEV after weeks of exploitation
PAN-OS portals with authentication-override cookies on a shared certificate let attackers forge a valid session. Rapid7 observed exploitation since May 17. Federal patch deadline June 19.