Description
Palo Alto Networks PAN-OS GlobalProtect 是 Palo Alto Networks 公司推出的企业级 SSL VPN 解决方案，为企业用户提供安全的远程访问服务，广泛应用于金融、政府、医疗等关键基础设施领域。PAN-OS GlobalProtect /ssl-vpn/login.esp 接口存在权限绕过漏洞，攻击者可利用 TLS 证书公钥伪造认证 cookie 绕过身份验证，获取管理员权限。
Palo Alto Networks PAN-OS GlobalProtect /ssl-vpn/login.esp 权限绕过漏洞（CVE-2026-0257）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://security.paloaltonetworks.com/CVE-2026-0257
https://www.rapid7.com/blog/post/etr-rapid7-observed-exploitation-of-pan-os-globalprotect-authentication-bypass-vulnerability-cve-2026-0257/
https://arcticwolf.com/resources/blog/cve-2026-0257-pan-os-globalprotect-authentication-bypass/
https://unit42.paloaltonetworks.com/active-exploitation-of-pan-os-cve-2026-0257/
https://fidelissecurity.com/vulnerabilities/cve-2026-0257/
https://mallory.ai/vulnerabilities/CVE-2026-0257
https://www.bleepingcomputer.com/news/security/palo-alto-globalprotect-vpn-auth-bypass-flaw-now-exploited-in-attacks/
https://thehackernews.com/2026/05/pan-os-globalprotect-authentication.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0257
https://github.com/sfewer-r7/CVE-2026-0257