Security CISA KEV Latest record Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Recorded 29 Oct 2026 at 20:19 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position.
See the latest record .
The historical field “Public exploit code” recorded Nuclei detection-template membership. It did not establish exploit availability. The original recorded fields remain below.
CVE CISA Known Exploited Vulnerabilities
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Palo Alto Networks PAN-OS contains an authentication bypass vulnerability that allows attackers to bypass security restrictions and establish an unauthorized VPN connection.
What it said
CVE CVE-2026-0257
Vendor Palo Alto Networks
Product PAN-OS
CISA KEV Listed 29 May 2026
Known ransomware use Yes
Federal remediation due 1 Jun 2026
Public detection template Nuclei template listed
Public exploit code Nuclei template listed
Source evidence when recorded
CISA KEV Complete at observationRead 29 Oct 2026 at 20:17 UTC
Public detection templates (Nuclei) Complete at observationRead 29 Oct 2026 at 20:17 UTC
Coverage describes the sources at this observation. A complete read then does not establish their current position.
What changed
Detection template: Nuclei template listed
29 Oct 2026 Detection template: Nuclei template listed
28 Oct 2026 Page history
Changes are dated when recorded; day views use the last saved version from that UTC day, and citations stay fixed.
Cite this version Field-level log (8)
Up to 100 recent field edits are shown; older edits may be outside retention.
29 Oct 2026 · 20:19:26 UTC
Public detection template Nuclei template listed 29 Oct 2026 · 20:19:26 UTC
Link: Vendor advisory https://security.paloaltonetworks.com/CVE-2026-0257 → No longer listed in this observation 29 Oct 2026 · 20:19:26 UTC
Link: CISA-cited reference https://security.paloaltonetworks.com/CVE-2026-0257 28 Oct 2026 · 05:10:29 UTC
Public exploit code Nuclei template listed 28 Oct 2026 · 05:10:29 UTC
Source coverage: public-exploit-code Current 28 Oct 2026 · 05:10:29 UTC
Link: Nuclei template https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-0257.yaml 23 Oct 2026 · 09:33:49 UTC
Source coverage: cisa-kev Incomplete → Current 23 Oct 2026 · 08:31:50 UTC
Source coverage: cisa-kev Current → Incomplete