PAN-OS GlobalProtect CVE-2026-0257

Exploitation requires a network-reachable GlobalProtect portal or gateway on a vulnerable PAN-OS firewall or Prisma Access tenant - meaning the customer has GlobalProtect enabled and the portal/gateway interface is exposed (typically internet-facing on TCP/443), which is the default deployment pattern for remote-access VPN customers. No credentials, MFA tokens, client certificates, or user interaction are required (CVSS PR:N/UI:N/AT:N), and attack complexity is low. Exploitation is limited by the fact that firewalls without GlobalProtect configured are not exposed, and Panorama management appliances and Cloud NGFW instances are explicitly out of scope per the vendor; organizations that already restrict GlobalProtect portal access via source-IP allowlists or place it behind a ZTNA broker are not reachable by internet attackers.

Signals diverge sharply and should be reconciled before deprioritizing. CVSS 4.0 reports AV:N/AC:L/AT:N/PR:N/UI:N with subsequent-system impact SC:H/SI:H, meaning a network-reachable, unauthenticated, low-complexity bypass that pivots into high integrity/confidentiality impact on downstream systems (the VPN-protected network). CISA KEV confirms active exploitation and a public PoC exists, which would normally make this a top-priority patch item; however, EPSS is only 0.05% (17th percentile) and CISA's SSVC entry lists Exploitation as 'none' and Automatable as 'no' with Technical Impact 'partial' - a notable conflict with the KEV listing that suggests exploitation is targeted, manual, and not yet broadly weaponized rather than absent. Treat this as a real priority for any internet-facing GlobalProtect deployment given KEV + public PoC + unauthenticated network vector, while recognizing the low EPSS and SSVC scoring indicate the exploit is not yet a commodity scanner payload.

An attacker scans the internet for exposed GlobalProtect portal endpoints (TCP/443) and sends a crafted HTTPS request with forged or replayed cookie values that the portal accepts without proper integrity validation. Leveraging the publicly available exploit code, the attacker obtains a valid VPN tunnel into the corporate network as if they were an enrolled user, then pivots to internal services, file shares, or domain infrastructure under the routing scope granted to GlobalProtect clients.