
Vulnerabilities
Qilin, Inc Ransomware Bypasses MFA on PAN-OS Gateways via CVE-2026-0257
Threat actors use CVE-2026-0257 to bypass MFA on PAN-OS gateways, enabling VPN access and subsequent ransomware deployment in targeted networks.
Everything Patch Observer has reported about Palo Alto Networks: 3 stories, newest first. Part of our Vulnerabilities coverage.

Threat actors use CVE-2026-0257 to bypass MFA on PAN-OS gateways, enabling VPN access and subsequent ransomware deployment in targeted networks.

Palo Alto Networks Unit 42 reports that adversaries primarily used external edge exploitation and identity compromise to breach organizations in September 2026.

Admins can now patch a medium-severity flaw allowing root command execution on PAN-OS devices. Updates are available for most versions, with a fix ETA for others.