The vulnerability of the GlobalProtect portal and the GlobalProtect Gateway server of the PAN-OS operating system allows a hacker to bypass security restrictions.

🗓️ 25 May 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

GlobalProtect portal and Gateway on Palo Alto operating system allow remote bypass via insecure cookie validation.

Reporter	Title	Published	Views	Family All 29
GithubExploit	Exploit for Reliance on Cookies without Validation and Integrity Checking in Paloaltonetworks Pan-Os	3 Jun 202607:54	–	githubexploit
GithubExploit	Exploit for Reliance on Cookies without Validation and Integrity Checking in Paloaltonetworks Pan-Os	10 Jun 202607:34	–	githubexploit
GithubExploit	Exploit for Reliance on Cookies without Validation and Integrity Checking in Paloaltonetworks Pan-Os	9 Jun 202611:16	–	githubexploit
GithubExploit	Exploit for Reliance on Cookies without Validation and Integrity Checking in Paloaltonetworks Pan-Os	30 May 202609:04	–	githubexploit
GithubExploit	Exploit for CVE-2026-0257	29 May 202620:27	–	githubexploit
GithubExploit	Exploit for Reliance on Cookies without Validation and Integrity Checking in Paloaltonetworks Pan-Os	1 Jun 202600:41	–	githubexploit
GithubExploit	Exploit for Reliance on Cookies without Validation and Integrity Checking in Paloaltonetworks Pan-Os	1 Jun 202612:02	–	githubexploit
GithubExploit	Exploit for Reliance on Cookies without Validation and Integrity Checking in Paloaltonetworks Pan-Os	15 Jun 202606:49	–	githubexploit
ATTACKERKB	CVE-2026-0257	13 May 202618:15	–	attackerkb
Circl	CVE-2026-0257	13 May 202619:03	–	circl

Vulners

Node

palo_alto_networks prisma_accessRange11.2.0–11.2.7-h13

OR

palo_alto_networks prisma_accessRange10.2.0–10.2.10-h36

OR

palo_alto_networks pan-osRange<12.1.7

OR

palo_alto_networks pan-osRange<11.2.4-h17

OR

palo_alto_networks pan-osRange<11.2.12

OR

palo_alto_networks pan-osRange<11.1.4-h33

OR

palo_alto_networks pan-osRange<11.1.6-h32

OR

palo_alto_networks pan-osRange<11.1.7-h6

OR

palo_alto_networks pan-osRange<11.1.10-h25

OR

palo_alto_networks pan-osRange<11.1.13-h5

OR

palo_alto_networks pan-osRange<11.1.15

OR

palo_alto_networks pan-osRange<10.2.7-h34

OR

palo_alto_networks pan-osRange<10.2.10-h36

OR

palo_alto_networks pan-osRange<10.2.13-h21

OR

palo_alto_networks pan-osRange<10.2.16-h7

OR

palo_alto_networks pan-osRange<10.2.18-h6

OR

palo_alto_networks pan-osRange<12.1.4-h6

OR

palo_alto_networks pan-osRange<11.2.7-h14

OR

palo_alto_networks pan-osRange<11.2.10-h7

Source	Link
security	www.security.paloaltonetworks.com/CVE-2026-0257
cisa	www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
web	www.web.nvd.nist.gov/view/vuln/detail

01 Jun 2026 00:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS 25

CVSS 35.8

EPSS0.86678

GlobalProtect portal GlobalProtect gateway Palo Alto operating system cookie validation security bypass remote exploit