Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not impacted by these issues.

Authentication bypass vulnerability in Palo Alto Networks PAN-OS is being exploited in the wild. Apply the available patches as soon as possible.

Palo Alto PAN-OS versions 10.2.x < 10.2.18-h6 / 11.1.x < 11.1.15 / 11.2.x < 11.2.12 / 12.1.x < 12.1.7 is affected by an authentication bypass vulnerabilities in the GlobalProtect portal and gateway allowing an attacker to bypass security restrictions and establish an unauthorized VPN connection.

The version of Palo Alto Networks PAN-OS running on the remote host is a vulnerable version of 10.2.x, 11.1.x, 11.2.x, or 12.1.x. It is, therefore, affected by a vulnerability.

    Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-     OS software allows the attacker to bypass security restrictions and establish an unauthorized VPN     connection.

    Panorama and Cloud NGFW are not impacted by these issues.

Tenable has extracted the preceding description block directly from the PAN-OS security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
115260	Palo Alto PAN-OS < 12.1.7 GlobalProtect Authentication Bypass	Web App Scanning	Component Vulnerability	high
314450	Palo Alto Networks PAN-OS 10.2.x / 11.1.x / 11.2.x / 12.1.x Vulnerability	Nessus	Palo Alto Local Security Checks	high

Detections

Analytics

CVE-2026-0257

high

Tenable Plugins

high

high