{"schema":"vulnpedia.poc/1","cve":"CVE-2026-0257","generated":"2026-10-26T06:59:15.268Z","kev":{"since":"2026-05-29","ransomware":true},"epss":{"score":0.95012,"percentile":0.99861},"cvss":{"version":"4.0","score":7.8,"severity":"HIGH","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:N/E:A/AU:N/R:A/V:D/RE:M/U:Red"},"has_public_poc":true,"poc_sources":[{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/67bc455a960f","executable":false,"sourceId":"67bc455a960f","verification":"catalogued","source":"vulncheck-kev","modified":"2026-05-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"67bc455a960f","modified":"2026-05-29T00:00:00Z","url":"https://vulncheck.com/xdb/67bc455a960f"}],"repositoryUrl":"https://github.com/sfewer-r7/CVE-2026-0257"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/96671be61df1","executable":false,"sourceId":"96671be61df1","verification":"catalogued","source":"vulncheck-kev","modified":"2026-05-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"96671be61df1","modified":"2026-05-29T00:00:00Z","url":"https://vulncheck.com/xdb/96671be61df1"}],"repositoryUrl":"https://github.com/bolubey/CVE-2026-0257"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/6a7d3e73b64c","executable":false,"sourceId":"6a7d3e73b64c","verification":"catalogued","source":"vulncheck-kev","modified":"2026-05-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"6a7d3e73b64c","modified":"2026-05-29T00:00:00Z","url":"https://vulncheck.com/xdb/6a7d3e73b64c"}],"repositoryUrl":"https://github.com/tushargurav28/CVE-2026-0257"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/8929a677e400","executable":false,"sourceId":"8929a677e400","verification":"catalogued","source":"vulncheck-kev","modified":"2026-05-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"8929a677e400","modified":"2026-05-29T00:00:00Z","url":"https://vulncheck.com/xdb/8929a677e400"}],"repositoryUrl":"https://github.com/grayxploit/CVE-2026-0257"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/3e3a9e393003","executable":false,"sourceId":"3e3a9e393003","verification":"catalogued","source":"vulncheck-kev","modified":"2026-05-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"3e3a9e393003","modified":"2026-05-29T00:00:00Z","url":"https://vulncheck.com/xdb/3e3a9e393003"}],"repositoryUrl":"https://github.com/Ez4rd1x1/CVE-2026-0257"}],"poc_candidates":[{"url":"https://github.com/sfewer-r7/CVE-2026-0257","source":"poc-in-github","sourceId":"CVE-2026-0257","description":"Proof-of-concept script to leverage the PAN-OS GlobalProtect authentication bypass CVE-2026-0257","modified":"2026-09-30T18:24:44Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-0257","url":"https://github.com/sfewer-r7/CVE-2026-0257"},{"source":"poc-in-github","sourceId":"CVE-2026-0257","modified":"2026-09-30T18:24:44Z","url":"https://github.com/sfewer-r7/CVE-2026-0257"}],"tags":[]},{"url":"https://github.com/akashsingh0454/CVE-2026-0257-PoC","source":"poc-in-github","sourceId":"CVE-2026-0257","modified":"2026-06-03T14:55:43Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-0257","url":"https://github.com/akashsingh0454/CVE-2026-0257-PoC"},{"source":"poc-in-github","sourceId":"CVE-2026-0257","modified":"2026-06-03T14:55:43Z","url":"https://github.com/akashsingh0454/CVE-2026-0257-PoC"}],"tags":[]},{"url":"https://github.com/HORKimhab/CVE-2026-0257","source":"poc-in-github","sourceId":"CVE-2026-0257","description":"CVE-2026-0257 - PAN-OS","modified":"2026-05-31T07:51:52Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-0257","url":"https://github.com/HORKimhab/CVE-2026-0257"},{"source":"poc-in-github","sourceId":"CVE-2026-0257","modified":"2026-05-31T07:51:52Z","url":"https://github.com/HORKimhab/CVE-2026-0257"}],"tags":[]},{"url":"https://github.com/0xBlackash/CVE-2026-0257","source":"poc-in-github","sourceId":"CVE-2026-0257","description":"CVE-2026-0257","modified":"2026-06-15T14:09:27Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-0257","url":"https://github.com/0xBlackash/CVE-2026-0257"},{"source":"poc-in-github","sourceId":"CVE-2026-0257","modified":"2026-06-15T14:09:27Z","url":"https://github.com/0xBlackash/CVE-2026-0257"}],"tags":[]},{"url":"https://github.com/tushargurav28/CVE-2026-0257","source":"poc-in-github","sourceId":"CVE-2026-0257","description":"Palo Alto Networks PAN-OS contains an authentication bypass caused by flaws in the GlobalProtect portal and gateway, letting attackers establish unauthorized VPN connections, exploit requires network access to the portal or gateway.","modified":"2026-06-15T14:53:13Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-0257","url":"https://github.com/tushargurav28/CVE-2026-0257"},{"source":"poc-in-github","sourceId":"CVE-2026-0257","modified":"2026-06-15T14:53:13Z","url":"https://github.com/tushargurav28/CVE-2026-0257"}],"tags":[]},{"url":"https://github.com/grayxploit/CVE-2026-0257","source":"poc-in-github","sourceId":"CVE-2026-0257","description":"GrayXploit Security research and defensive team validate this toolkit for CVE-2026-0257 (PAN-OS GlobalProtect Authentication Bypass). Includes vulnerability assessment, detection guidance, technical analysis, indicators of compromise (IOCs), and remediation validation resources for security teams and defenders.","modified":"2026-10-13T05:23:43Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-0257","url":"https://github.com/grayxploit/CVE-2026-0257"},{"source":"poc-in-github","sourceId":"CVE-2026-0257","modified":"2026-10-13T05:23:43Z","url":"https://github.com/grayxploit/CVE-2026-0257"}],"tags":[]},{"url":"https://github.com/Ez4rd1x1/CVE-2026-0257","source":"poc-in-github","sourceId":"CVE-2026-0257","description":"testing","modified":"2026-06-15T06:51:51Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-0257","url":"https://github.com/Ez4rd1x1/CVE-2026-0257"},{"source":"poc-in-github","sourceId":"CVE-2026-0257","modified":"2026-06-15T06:51:51Z","url":"https://github.com/Ez4rd1x1/CVE-2026-0257"}],"tags":[]}],"test_commands":[{"tool":"nuclei","cmd":"nuclei -id CVE-2026-0257 -u https://TARGET","note":"Detection template — review its checks and affected versions before use."},{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2026-0257/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"detection_sources":[{"kind":"nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-0257.yaml","template":"javascript/cves/2026/CVE-2026-0257.yaml","executable":true}],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2026-0257%22&type=repositories","executable":false}]}