{"schema":"vulnpedia.research/1","cve":"CVE-2026-0257","references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0257","tags":["vendor-advisory","Vendor Advisory","KEV report"],"source":"mitre","sourceId":"palo_alto","modified":"2026-05-29T17:20:05.451Z","origins":[{"source":"mitre","sourceId":"palo_alto","modified":"2026-05-29T17:20:05.451Z","url":"https://security.paloaltonetworks.com/CVE-2026-0257"},{"source":"nvd","sourceId":"CVE-2026-0257","modified":"2026-06-17T10:10:37.953","url":"https://security.paloaltonetworks.com/CVE-2026-0257"},{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","modified":"2026-05-29T00:00:00Z","url":"https://security.paloaltonetworks.com/CVE-2026-0257"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-0257","tags":["government-resource","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-05-30T03:55:17.629Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-05-30T03:55:17.629Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-0257"},{"source":"nvd","sourceId":"CVE-2026-0257","modified":"2026-06-17T10:10:37.953","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-0257"}]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-967325.html","tags":["Third Party Advisory"],"source":"mitre","sourceId":"siemens-SADP","modified":"2026-10-15T01:11:26.182Z","origins":[{"source":"mitre","sourceId":"siemens-SADP","modified":"2026-10-15T01:11:26.182Z","url":"https://cert-portal.siemens.com/productcert/html/ssa-967325.html"},{"source":"nvd","sourceId":"CVE-2026-0257","modified":"2026-06-17T10:10:37.953","url":"https://cert-portal.siemens.com/productcert/html/ssa-967325.html"}]},{"source":"euvd","sourceId":"EUVD-2026-30104","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-30104","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-30104","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-30104"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2026-0257","modified":"2026-05-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","modified":"2026-05-29T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b7fb4ba7-d51e-416b-b7e5-edb69fed283f","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-0257","modified":"2026-05-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","modified":"2026-05-29T00:00:00Z","url":"https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b7fb4ba7-d51e-416b-b7e5-edb69fed283f"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-0257","modified":"2026-05-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","modified":"2026-05-29T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"url":"https://www.rapid7.com/blog/post/etr-rapid7-observed-exploitation-of-pan-os-globalprotect-authentication-bypass-vulnerability-cve-2026-0257/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-0257","modified":"2026-05-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","modified":"2026-05-29T00:00:00Z","url":"https://www.rapid7.com/blog/post/etr-rapid7-observed-exploitation-of-pan-os-globalprotect-authentication-bypass-vulnerability-cve-2026-0257/"}]},{"url":"https://t.me/ctinow/251048","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-0257","modified":"2026-05-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","modified":"2026-05-29T00:00:00Z","url":"https://t.me/ctinow/251048"}]},{"url":"https://unit42.paloaltonetworks.com/active-exploitation-of-pan-os-cve-2026-0257/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-0257","modified":"2026-05-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","modified":"2026-05-29T00:00:00Z","url":"https://unit42.paloaltonetworks.com/active-exploitation-of-pan-os-cve-2026-0257/"}]},{"url":"https://arcticwolf.com/resources/blog/arctic-wolf-observes-increase-in-palo-alto-networks-globalprotect-authentication-bypass-exploitation-via-cve-2026-0257/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-0257","modified":"2026-05-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","modified":"2026-05-29T00:00:00Z","url":"https://arcticwolf.com/resources/blog/arctic-wolf-observes-increase-in-palo-alto-networks-globalprotect-authentication-bypass-exploitation-via-cve-2026-0257/"}]},{"url":"https://fortiguard.fortinet.com/outbreak-alert/pan-os-globalprotect-auth-bypass","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-0257","modified":"2026-05-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","modified":"2026-05-29T00:00:00Z","url":"https://fortiguard.fortinet.com/outbreak-alert/pan-os-globalprotect-auth-bypass"}]},{"url":"https://hunt.io/blog/eastern-europe-malicious-infrastructure-report","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-0257","modified":"2026-05-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","modified":"2026-05-29T00:00:00Z","url":"https://hunt.io/blog/eastern-europe-malicious-infrastructure-report"}]},{"url":"https://www.guidepointsecurity.com/wp-content/uploads/2026/07/GRIT_Q2_2026_Ransomware__Cyber_Threat_Insights_Report.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-0257","modified":"2026-05-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","modified":"2026-05-29T00:00:00Z","url":"https://www.guidepointsecurity.com/wp-content/uploads/2026/07/GRIT_Q2_2026_Ransomware__Cyber_Threat_Insights_Report.pdf"}]},{"url":"https://arcticwolf.com/resources/blog/exploitation-of-cve-2026-0257-leads-to-qilin-ransomware/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-0257","modified":"2026-05-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","modified":"2026-05-29T00:00:00Z","url":"https://arcticwolf.com/resources/blog/exploitation-of-cve-2026-0257-leads-to-qilin-ransomware/"}]},{"url":"https://cyble.com/reports/H1-2026-Global-Threat-Landscape-Report.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-0257","modified":"2026-05-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","modified":"2026-05-29T00:00:00Z","url":"https://cyble.com/reports/H1-2026-Global-Threat-Landscape-Report.pdf"}]},{"url":"https://www.recordedfuture.com/blog/july-2026-cve-landscape","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-0257","modified":"2026-05-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","modified":"2026-05-29T00:00:00Z","url":"https://www.recordedfuture.com/blog/july-2026-cve-landscape"}]},{"url":"https://socradar.io/blog/operation-master-intrusion-monetization-pipeline/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-0257","modified":"2026-05-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","modified":"2026-05-29T00:00:00Z","url":"https://socradar.io/blog/operation-master-intrusion-monetization-pipeline/"}]},{"url":"https://www.group-ib.com/blog/stray-cat-network-edge/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-0257","modified":"2026-05-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","modified":"2026-05-29T00:00:00Z","url":"https://www.group-ib.com/blog/stray-cat-network-edge/"}]},{"url":"https://vulncheck.com/xdb/67bc455a960f","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"67bc455a960f","modified":"2026-05-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"67bc455a960f","modified":"2026-05-29T00:00:00Z","url":"https://vulncheck.com/xdb/67bc455a960f"}]},{"url":"https://github.com/sfewer-r7/CVE-2026-0257","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"67bc455a960f","modified":"2026-05-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"67bc455a960f","modified":"2026-05-29T00:00:00Z","url":"https://github.com/sfewer-r7/CVE-2026-0257"}]},{"url":"https://vulncheck.com/xdb/96671be61df1","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"96671be61df1","modified":"2026-05-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"96671be61df1","modified":"2026-05-29T00:00:00Z","url":"https://vulncheck.com/xdb/96671be61df1"}]},{"url":"https://github.com/bolubey/CVE-2026-0257","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"96671be61df1","modified":"2026-05-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"96671be61df1","modified":"2026-05-29T00:00:00Z","url":"https://github.com/bolubey/CVE-2026-0257"}]},{"url":"https://vulncheck.com/xdb/6a7d3e73b64c","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"6a7d3e73b64c","modified":"2026-05-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"6a7d3e73b64c","modified":"2026-05-29T00:00:00Z","url":"https://vulncheck.com/xdb/6a7d3e73b64c"}]},{"url":"https://github.com/tushargurav28/CVE-2026-0257","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"6a7d3e73b64c","modified":"2026-05-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"6a7d3e73b64c","modified":"2026-05-29T00:00:00Z","url":"https://github.com/tushargurav28/CVE-2026-0257"}]},{"url":"https://vulncheck.com/xdb/8929a677e400","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"8929a677e400","modified":"2026-05-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"8929a677e400","modified":"2026-05-29T00:00:00Z","url":"https://vulncheck.com/xdb/8929a677e400"}]},{"url":"https://github.com/grayxploit/CVE-2026-0257","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"8929a677e400","modified":"2026-05-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"8929a677e400","modified":"2026-05-29T00:00:00Z","url":"https://github.com/grayxploit/CVE-2026-0257"}]},{"url":"https://vulncheck.com/xdb/3e3a9e393003","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"3e3a9e393003","modified":"2026-05-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"3e3a9e393003","modified":"2026-05-29T00:00:00Z","url":"https://vulncheck.com/xdb/3e3a9e393003"}]},{"url":"https://github.com/Ez4rd1x1/CVE-2026-0257","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"3e3a9e393003","modified":"2026-05-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"3e3a9e393003","modified":"2026-05-29T00:00:00Z","url":"https://github.com/Ez4rd1x1/CVE-2026-0257"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/sfewer-r7/CVE-2026-0257","source":"poc-in-github","sourceId":"CVE-2026-0257","description":"Proof-of-concept script to leverage the PAN-OS GlobalProtect authentication bypass CVE-2026-0257","modified":"2026-09-30T18:24:44Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-0257","url":"https://github.com/sfewer-r7/CVE-2026-0257"},{"source":"poc-in-github","sourceId":"CVE-2026-0257","modified":"2026-09-30T18:24:44Z","url":"https://github.com/sfewer-r7/CVE-2026-0257"}],"tags":[]},{"url":"https://github.com/akashsingh0454/CVE-2026-0257-PoC","source":"poc-in-github","sourceId":"CVE-2026-0257","modified":"2026-06-03T14:55:43Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-0257","url":"https://github.com/akashsingh0454/CVE-2026-0257-PoC"},{"source":"poc-in-github","sourceId":"CVE-2026-0257","modified":"2026-06-03T14:55:43Z","url":"https://github.com/akashsingh0454/CVE-2026-0257-PoC"}],"tags":[]},{"url":"https://github.com/HORKimhab/CVE-2026-0257","source":"poc-in-github","sourceId":"CVE-2026-0257","description":"CVE-2026-0257 - PAN-OS","modified":"2026-05-31T07:51:52Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-0257","url":"https://github.com/HORKimhab/CVE-2026-0257"},{"source":"poc-in-github","sourceId":"CVE-2026-0257","modified":"2026-05-31T07:51:52Z","url":"https://github.com/HORKimhab/CVE-2026-0257"}],"tags":[]},{"url":"https://github.com/0xBlackash/CVE-2026-0257","source":"poc-in-github","sourceId":"CVE-2026-0257","description":"CVE-2026-0257","modified":"2026-06-15T14:09:27Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-0257","url":"https://github.com/0xBlackash/CVE-2026-0257"},{"source":"poc-in-github","sourceId":"CVE-2026-0257","modified":"2026-06-15T14:09:27Z","url":"https://github.com/0xBlackash/CVE-2026-0257"}],"tags":[]},{"url":"https://github.com/tushargurav28/CVE-2026-0257","source":"poc-in-github","sourceId":"CVE-2026-0257","description":"Palo Alto Networks PAN-OS contains an authentication bypass caused by flaws in the GlobalProtect portal and gateway, letting attackers establish unauthorized VPN connections, exploit requires network access to the portal or gateway.","modified":"2026-06-15T14:53:13Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-0257","url":"https://github.com/tushargurav28/CVE-2026-0257"},{"source":"poc-in-github","sourceId":"CVE-2026-0257","modified":"2026-06-15T14:53:13Z","url":"https://github.com/tushargurav28/CVE-2026-0257"}],"tags":[]},{"url":"https://github.com/grayxploit/CVE-2026-0257","source":"poc-in-github","sourceId":"CVE-2026-0257","description":"GrayXploit Security research and defensive team validate this toolkit for CVE-2026-0257 (PAN-OS GlobalProtect Authentication Bypass). Includes vulnerability assessment, detection guidance, technical analysis, indicators of compromise (IOCs), and remediation validation resources for security teams and defenders.","modified":"2026-10-13T05:23:43Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-0257","url":"https://github.com/grayxploit/CVE-2026-0257"},{"source":"poc-in-github","sourceId":"CVE-2026-0257","modified":"2026-10-13T05:23:43Z","url":"https://github.com/grayxploit/CVE-2026-0257"}],"tags":[]},{"url":"https://github.com/Ez4rd1x1/CVE-2026-0257","source":"poc-in-github","sourceId":"CVE-2026-0257","description":"testing","modified":"2026-06-15T06:51:51Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-0257","url":"https://github.com/Ez4rd1x1/CVE-2026-0257"},{"source":"poc-in-github","sourceId":"CVE-2026-0257","modified":"2026-06-15T06:51:51Z","url":"https://github.com/Ez4rd1x1/CVE-2026-0257"}],"tags":[]}],"cataloguedPoc":[{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"67bc455a960f","url":"https://vulncheck.com/xdb/67bc455a960f","cve":"CVE-2026-0257","dateAdded":"2026-05-31T23:49:26Z","modified":"2026-05-29T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/sfewer-r7/CVE-2026-0257","observations":[{"dateAdded":"2026-05-31T23:49:26Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"67bc455a960f","modified":"2026-05-29T00:00:00Z","url":"https://vulncheck.com/xdb/67bc455a960f"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"96671be61df1","url":"https://vulncheck.com/xdb/96671be61df1","cve":"CVE-2026-0257","dateAdded":"2026-06-02T15:49:50Z","modified":"2026-05-29T00:00:00Z","exploitType":"info-leak","repositoryUrl":"https://github.com/bolubey/CVE-2026-0257","observations":[{"dateAdded":"2026-06-02T15:49:50Z","exploitType":"info-leak"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"96671be61df1","modified":"2026-05-29T00:00:00Z","url":"https://vulncheck.com/xdb/96671be61df1"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"6a7d3e73b64c","url":"https://vulncheck.com/xdb/6a7d3e73b64c","cve":"CVE-2026-0257","dateAdded":"2026-06-03T15:58:56Z","modified":"2026-05-29T00:00:00Z","exploitType":"info-leak","repositoryUrl":"https://github.com/tushargurav28/CVE-2026-0257","observations":[{"dateAdded":"2026-06-03T15:58:56Z","exploitType":"info-leak"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"6a7d3e73b64c","modified":"2026-05-29T00:00:00Z","url":"https://vulncheck.com/xdb/6a7d3e73b64c"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"8929a677e400","url":"https://vulncheck.com/xdb/8929a677e400","cve":"CVE-2026-0257","dateAdded":"2026-06-10T10:54:17Z","modified":"2026-05-29T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/grayxploit/CVE-2026-0257","observations":[{"dateAdded":"2026-06-10T10:54:17Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"8929a677e400","modified":"2026-05-29T00:00:00Z","url":"https://vulncheck.com/xdb/8929a677e400"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"3e3a9e393003","url":"https://vulncheck.com/xdb/3e3a9e393003","cve":"CVE-2026-0257","dateAdded":"2026-06-15T06:49:27Z","modified":"2026-05-29T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/Ez4rd1x1/CVE-2026-0257","observations":[{"dateAdded":"2026-06-15T06:49:27Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"3e3a9e393003","modified":"2026-05-29T00:00:00Z","url":"https://vulncheck.com/xdb/3e3a9e393003"}]}],"vendorStatements":[],"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2026-05-29T00:00:00Z","modified":"2026-05-29T00:00:00Z","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Known","reportedByVulncheckCanaries":false,"vendorProject":"Palo Alto Networks","product":"PAN-OS","dueDate":"2026-06-01T00:00:00Z","cisaDateAdded":"2026-05-29T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","modified":"2026-05-29T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","catalog":"VulnCheck KEV","kind":"report","url":"https://security.paloaltonetworks.com/CVE-2026-0257","dateAdded":"2026-05-29T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","url":"https://security.paloaltonetworks.com/CVE-2026-0257"},{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","url":"https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b7fb4ba7-d51e-416b-b7e5-edb69fed283f"},{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"},{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","url":"https://www.rapid7.com/blog/post/etr-rapid7-observed-exploitation-of-pan-os-globalprotect-authentication-bypass-vulnerability-cve-2026-0257/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","catalog":"VulnCheck KEV","kind":"report","url":"https://t.me/ctinow/251048","dateAdded":"2026-05-30T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","url":"https://t.me/ctinow/251048"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","catalog":"VulnCheck KEV","kind":"report","url":"https://unit42.paloaltonetworks.com/active-exploitation-of-pan-os-cve-2026-0257/","dateAdded":"2026-06-05T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","url":"https://unit42.paloaltonetworks.com/active-exploitation-of-pan-os-cve-2026-0257/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","catalog":"VulnCheck KEV","kind":"report","url":"https://arcticwolf.com/resources/blog/arctic-wolf-observes-increase-in-palo-alto-networks-globalprotect-authentication-bypass-exploitation-via-cve-2026-0257/","dateAdded":"2026-06-11T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","url":"https://arcticwolf.com/resources/blog/arctic-wolf-observes-increase-in-palo-alto-networks-globalprotect-authentication-bypass-exploitation-via-cve-2026-0257/"},{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","url":"https://fortiguard.fortinet.com/outbreak-alert/pan-os-globalprotect-auth-bypass"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","catalog":"VulnCheck KEV","kind":"report","url":"https://hunt.io/blog/eastern-europe-malicious-infrastructure-report","dateAdded":"2026-06-24T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","url":"https://hunt.io/blog/eastern-europe-malicious-infrastructure-report"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","catalog":"VulnCheck KEV","kind":"report","url":"https://www.guidepointsecurity.com/wp-content/uploads/2026/07/GRIT_Q2_2026_Ransomware__Cyber_Threat_Insights_Report.pdf","dateAdded":"2026-07-09T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","url":"https://www.guidepointsecurity.com/wp-content/uploads/2026/07/GRIT_Q2_2026_Ransomware__Cyber_Threat_Insights_Report.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","catalog":"VulnCheck KEV","kind":"report","url":"https://arcticwolf.com/resources/blog/exploitation-of-cve-2026-0257-leads-to-qilin-ransomware/","dateAdded":"2026-07-20T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","url":"https://arcticwolf.com/resources/blog/exploitation-of-cve-2026-0257-leads-to-qilin-ransomware/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","catalog":"VulnCheck KEV","kind":"report","url":"https://cyble.com/reports/H1-2026-Global-Threat-Landscape-Report.pdf","dateAdded":"2026-07-27T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","url":"https://cyble.com/reports/H1-2026-Global-Threat-Landscape-Report.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","catalog":"VulnCheck KEV","kind":"report","url":"https://www.recordedfuture.com/blog/july-2026-cve-landscape","dateAdded":"2026-08-07T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","url":"https://www.recordedfuture.com/blog/july-2026-cve-landscape"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","catalog":"VulnCheck KEV","kind":"report","url":"https://socradar.io/blog/operation-master-intrusion-monetization-pipeline/","dateAdded":"2026-09-24T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","url":"https://socradar.io/blog/operation-master-intrusion-monetization-pipeline/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","catalog":"VulnCheck KEV","kind":"report","url":"https://www.group-ib.com/blog/stray-cat-network-edge/","dateAdded":"2026-10-21T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-0257","url":"https://www.group-ib.com/blog/stray-cat-network-edge/"}]}]}