CVE-2026-0265Disclosure(paloaltonetworks / pan-os)

HIGHCVSS 8.1 · HIGH

Exploitation observed; activity peaked at 7 mentions and remains active

Immediate actions

Patch paloaltonetworks pan-os systems immediately
Assume compromise if assets are exposed
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: Immediate (within 24h)

NVD description

An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to bypass authentication controls when Cloud Authentication Service (CAS) is enabled. The risk is higher if CAS is enabled on the management interface and lower when any other login interfaces are used. The risk of this issue is greatly reduced if you secure access to the management web interface by restricting access to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma Access® are not impacted by this vulnerability.

paloaltonetworks CVEs Back to dashboard

7.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

Weakness type (CWE)

CWE-347

Priority

HIGH

Exploitation

ACTIVE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

pan-os
ruggedcom_ape1808
ruggedcom_ape1808_firmware

Threat summary

Active exploitation appears in 8 classified signals
Public PoC is present in monitored signal
Patch or workaround signal is available
60 mentions across 36 observed days

What's happening

Active exploitation reported across 8 signals
PoC mentioned or linked in 5 signals
Patch or workaround mentioned in 13 signals
Technical details provided in 49 signals
Disclosure: 26 classified signals
General: 16 classified signals
Peaked 29d ago at 7 mentions (2026-05-22); latest day: 1
60 total mentions across 36 days

Affected systems

Vendors

paloaltonetworks siemens

Products

pan-osruggedcom_ape1808ruggedcom_ape1808_firmware

18 versions affected across 3 products

Deep dive

Activity timeline60 mentions / 36d

Signal classification5 categories

Disclosure

2644.1%

General

1627.1%

Patch

711.9%

Active Exploitation

711.9%

PoC

35.1%

Referenced assets35 URLs

By indicator

Classification over time

Date	Total	Labels

2026-05-14	4	Disclosure2General1Patch1
2026-05-15	1	Disclosure1
2026-05-18	1	Patch1
2026-05-19	2	General2
2026-05-20	4	Disclosure1General3
2026-05-21	3	Disclosure1General2
2026-05-22	7	Disclosure5General1Patch1
2026-05-23	4	Active Exploitation1Disclosure1Patch1PoC1
2026-05-24	2	Disclosure1Patch1
2026-05-25	4	Active Exploitation1Disclosure1General1PoC1
2026-05-27	3	Disclosure3
2026-05-29	1	PoC1
2026-05-30	1	General1
2026-06-02	1	General1
2026-06-15	1	Disclosure1
2026-06-16	1	General1
2026-06-17	1	Disclosure1
2026-06-18	1	Disclosure1
2026-06-19	1	Patch1
2026-06-26	1	Active Exploitation1
2026-06-27	1	Active Exploitation1
2026-06-28	1	Disclosure1
2026-06-29	1	General1
2026-06-30	1	Active Exploitation1
2026-07-02	1	Active Exploitation1
2026-07-06	1	Disclosure1
2026-07-12	1	Patch1
2026-07-18	1	Disclosure1
2026-07-20	1	Disclosure1
2026-07-24	1	Active Exploitation1
2026-08-05	1	Disclosure1
2026-08-22	1	General1
2026-08-25	1	Disclosure1
2026-08-31	1	General1
2026-09-01	1	Disclosure1

Full discourse20 posts

Nathan McNulty@NathanMcNulty140d
General
CVE-2020-2033, CVE-2020-2021, CVE-2020-2050, CVE-2026-0257, and now CVE-2026-0265 Authentication bypass, as in direct access to your internal networks over the Internet This VPN architecture should be dead, get it off the Internet, it's a time bomb waiting to happen
Post summary
The post warns that several CVEs enable authentication bypass in VPN architectures, urging removal from the Internet, but provides no PoC, exploit, patch, or evidence of active exploitation.
4596452212113.6K
18.5K followersView on X
Harsh Jaiswal@rootxharsh141d
Disclosure
When Your VPN Opens Your Private Network to the Public! An auth bypass in Palo Alto PAN-OS CAS Auth (CVE-2026-0265) that lets an attacker connect to the company's GlobalProtect VPN. Blog - https://www.hacktron.ai/blog/cve-2026-0265-panos-globalprotect-cas-auth-bypass
Post summary
The blog announces an authentication bypass (CVE‑2026‑0265) in Palo Alto PAN‑OS CAS Auth that permits attackers to connect to the GlobalProtect VPN, but no PoC, exploit, or patch is disclosed.
4743257150119.4K
22.4K followersView on X
watchTowr@watchtowrcyber142d
General
CVE-2026-0265, the PAN-OS auth bypass (when Cloud Auth Services are enabled) was fun to reproduce and load into the watchTowr Platform. Our friends @ @HacktronAI are publishing their analysis this week, so we won’t be publishing. Looking forward to it 🚀 https://t.co/7WxKCNuFBR
Post summary
The post notes successful reproduction of CVE-2026-0265 and that others will publish, but it lacks any PoC code, exploit details, or patch information, so it is treated as a general mention.
459627613760.4K
12.2K followersView on X
International Cyber Digest@IntCyberDigest146d
Disclosure
‼️🚨 Palo Alto Networks just dropped an advisory for CVE-2026-0265, an authentication bypass in PAN-OS. Palo Alto rated it HIGH with a CVSS of 7.2 and says exploitation has not been observed. The reporting researcher, Harsh Jaiswal of Hacktron AI, publicly pushed back on that rating. He says he already got VPN access to major corps by abusing the bug against GlobalProtect. He also flagged that the issue is not limited to PAN-OS, meaning the blast radius is wider than just firewalls. If that holds up, this is not a 7.2. Full technical details are landing on the Hacktron AI blog later next week. The flaw lives in the Cloud Authentication Service (CAS) when it is enabled and attached to a login interface. It hits PA-Series and VM-Series firewalls, plus Panorama virtual and M-Series appliances. Patches are partially available now, with additional fixed builds expected May 28. Admins running CAS on a Palo Alto login interface should verify exposure and patch on an emergency basis.
Post summary
Palo Alto Networks released an advisory for CVE‑2026‑0265, detailing an authentication bypass rated HIGH with a CVSS of 7.2; patches are available and future builds are expected, and no active exploitation has been observed.
64012236526.8K
193.5K followersView on X
国家サイバー統括室(注意・警戒情報)@cyber_forecast139d
General
【注意喚起】 2026年5月22日、「Palo Alto Networks製PAN-OSにおける認証回避の脆弱性（CVE-2026-0265）」について、JPCERT/CCが注意喚起をしています。ご確認ください。 https://x.com/jpcert/status/2057652917650456653
Post summary
JPCERT issued a warning about the PAN-OS authentication bypass CVE‑2026‑0265, but provided no PoC, exploit code, or patch details.
042169819.8K
101.2K followersView on X
JPCERTコーディネーションセンター@jpcert139d
Patch
Palo Alto Networks製PAN-OSにおける認証回避の脆弱性（CVE-2026-0265）に関する注意喚起を公開。本脆弱性の技術解説が公表されたため、今後攻撃コードが公開され、広く攻撃が行われる可能性があります。開発元が提供する情報を確認し、対策や緩和策を実施してください。^MH https://www.jpcert.or.jp/at/2026/at260015.html
Post summary
An advisory alerting on CVE‑2026‑0265, an authentication‑bypass flaw in Palo Alto PAN‑OS, warns of potential future exploitation and urges users to apply vendor‑provided mitigations.
111127525.0K
34.0K followersView on X
Gray Hats@the_yellow_fall147d
Patch
Palo Alto Networks patches CVE-2026-0263 and CVE-2026-0265. Fixes for IKEv2 RCE and CAS bypass are now available. Update your PAN-OS firewalls immediately! #PaloAltoNetworks #PANOS #CyberSecurity #InfoSec #RCE #Firewall #VulnerabilityAlert #CVE https://securityonline.info/palo-alto-pan-os-vulnerability-cve-2026-0263-ikev2-overflow/ https://t.co/DYQjh0aG9x
Post summary
The post announces that Palo Alto Networks has released patches for CVE-2026-0263 and CVE-2026-0265, which address IKEv2 RCE and CAS bypass vulnerabilities, and urges immediate updates.
2602922.0K
12.5K followersView on X
Harsh Jaiswal@rootxharsh141d
General
@HacktronAI https://www.hacktron.ai/blog/cve-2026-0265-panos-globalprotect-cas-auth-bypass
Post summary
The tweet merely points to a blog post about CVE‑2026‑0265; it provides no explicit details on PoC, exploitation, patches, or technical specifics.
1402473.4K
22.4K followersView on X
Simo@SimoKohonen142d
General
PAN Cortex Xpanse has been non-stop scanning CVE-2026-0265 associated paths since May 7th.. https://t.co/nrZ8BXLt6u
Post summary
The tweet notes that PAN Cortex Xpanse has been continuously scanning for CVE-2026-0265 path identifiers since May 7, but offers no proof of exploitation, PoC, technical details, patch information, or debunking.
1402074.6K
3.2K followersView on X
nekono_nanomotoni@nekono_naha136d
PoC
Public PoC-level details exist for CVE-2026-0265, a PAN-OS auth bypass involving CAS-enabled login interfaces. My scan found 3,437 CAS-confirmed IPs among 55,718 reachable public Palo Alto/GlobalProtect IPs (6.17%). Image: global/country breakdown. https://t.co/xLW8xbicoI
Post summary
The post announces that public PoC‑level details for CVE‑2026‑0265 exist, describing an authentication bypass in PAN‑OS’s CAS‑enabled login interfaces, but provides no evidence of active exploitation or patch information.
0201682.6K
6.1K followersView on X
Nicolas Krassas@Dinosn141d
General
When Your VPN Opens Your Private Network to the Public | Hacktron AI https://www.hacktron.ai/blog/cve-2026-0265-panos-globalprotect-cas-auth-bypass
Post summary
The excerpt merely announces the existence of CVE‑2026‑0265 via a blog title and link, without providing details on PoCs, exploit code, active use, patches, technical specifics, or any debunking claims.
0401041.7K
158.6K followersView on X
s1r1us@S1r1u5_127d
General
guess how much this research cost when it was human-led? https://www.hacktron.ai/blog/cve-2026-0265-panos-globalprotect-cas-auth-bypass around $1,000 in model/tooling costs, plus 3 days of human research time, so roughly $5,000 all-in. and palo didn't pay a penny (not complaining), but spent 1M on tokens.
Post summary
The post cites a blog about CVE‑2026‑0265 and notes the research cost, but provides no exploit code, patch details, or evidence of active exploitation, leaving the information essentially descriptive.
0001051.8K
14.1K followersView on X
Bishop Fox@bishopfox131d
PoC
Can you determine whether a PAN-OS GlobalProtect portal is vulnerable to CVE-2026-0265 from a single anonymous request? Turns out you can. New research from Jon Williams, John Untz, and the Bishop Fox team breaks down the detection technique and releases an open-source checker. https://t.co/GTyrJrsyOs
Post summary
Researchers released an open‑source checker that demonstrates whether a PAN‑OS GlobalProtect portal is vulnerable to CVE‑2026‑0265 using a single anonymous request.
110741.2K
25.6K followersView on X
Rapid7@rapid7146d
Disclosure
On May 14, #PaloAltoNetworks published a security advisory for CVE-2026-0265 –a signature verification vulnerability that facilitates authentication bypass on PAN-OS. Palo Alto Networks assigned CVE-2026-0265 a “High” 7.2 CVSS score. More via our blog: https://r-7.co/438oEV7
Post summary
The statement announces a new Palo Alto Networks CVE (signature verification flaw) with a high CVSS score, but provides no PoC, exploit, active use, or patch details.
010621.8K
124.6K followersView on X
株式会社ブレインディレクション公式@BrainDirection76d
Active Exploitation
本日のセキュリティ速報（7/24）注目の脆弱性・インシデント・🔴 Check Point製品：管理機能の認証バイパス脆弱性（CVE-2026-50751）にJPCERT/CCが注意喚起。すでに悪用が確認されており、利用組織は侵害調査まで推奨される段階。米当局もSharePointと併せ悪用を警告。・🔴 Zimbra：ロシア系スパイグループがゼロデイを悪用し、メールと2FAコードを窃取したと報道。悪用確認済みのため利用組織は即時対応が必要。・🔴 Fortinet製品：関連する認証情報の漏えいについてJPCERT/CCが注意喚起。漏えいした認証情報の悪用リスクがあり、該当機器の認証情報変更等の確認を。・🟡 新エフエイコム：ランサムウェア攻撃により取引先情報が漏えいした恐れ（外部流出は未確認段階）。詳細は調査中とみられる。・🟡 日本交通：マルウェア感染で業務に影響、情報漏えいの可能性あり（漏えいの確定情報は未公表）。・🟡 Palo Alto Networks PAN-OS：認証回避の脆弱性（CVE-2026-0265）にJPCERT/CCが注意喚起。境界機器のため放置すると影響が大きく、早期の更新が必要。詳細・対策↓ https://www.brain-d.jp/news.html?d=sec-2026-07-24#sec-2026-07-24
Post summary
The report highlights that CVE‑2026‑50751 and CVE‑2026‑0265 are actively exploited, with vendors urging immediate patching, and also notes a Zimbra zero‑day used to steal emails and 2FA codes.
03041403
913 followersView on X
株式会社ブレインディレクション公式@BrainDirection82d
Disclosure
本日のセキュリティ速報（7/18）注目の脆弱性・インシデント・🔴 ネットワークセキュリティ製品群：PAN-OSの認証回避（CVE-2026-0265）、Check Point製品の認証バイパス（CVE-2026-50751）、FortiOSの複数脆弱性に加え、Fortinet製品関連の認証情報漏えいを・🔴 コカ・コーラ（フェアライフ）：ランサムウェア攻撃により米国での生産を停止。サプライチェーンへの実被害事例。・🟡 日産化学：システムへのサイバー攻撃の可能性があり、影響範囲を調査中（詳細未公表）。詳細・対策↓ https://www.brain-d.jp/news.html?d=sec-2026-07-18#sec-2026-07-18
Post summary
The post announces several recently disclosed authentication bypass vulnerabilities (CVE‑2026‑0265, CVE‑2026‑50751, etc.) affecting PAN‑OS, Check Point, and Fortinet products, without mentioning PoC, exploit code, or evidence of active exploitation.
02030164
915 followersView on X
株式会社ブレインディレクション公式@BrainDirection94d
Disclosure
本日のセキュリティ速報（7/6）注目の脆弱性・インシデント・🔴 Palo Alto Networks PAN-OS：認証回避の脆弱性（CVE-2026-0265）についてJPCERT/CCが注意喚起。境界防御製品の認証回避は侵入に直結するため緊急対応が必要。・🔴 Fortinet製品：関連する認証情報の漏えいに関するJPCERT/CC注意喚起が前日から継続。漏えい認証情報を使った不正アクセスの可能性があり、該当機器の確認と資格情報の更新が必要。・🔴 npm/拡張機能エコシステム：北朝鮮系ハッカーが「PolinRider」キャンペーンで108個の悪性パッケージ・拡張機能を公開。開発者環境を狙うサプライチェーン攻撃。・🟡 日本資産総研：ランサムウェア攻撃を受けたが、専門家調査により安全性を確認したと公表。・🟡 常石グループ：フィッシングメールにより認証情報が漏えい、再発防止策を発表。件数等の詳細は見出しからは不明。・🟡 ABCテレビ：グループ会社が不正アクセスを受け、業務関連情報が流出した可能性。詳細は調査中とみられる。詳細・対策↓ https://www.brain-d.jp/news.html?d=2026-07-06#sec-2026-07-06
Post summary
The advisory announces an authentication‑bypass vulnerability (CVE‑2026‑0265) in Palo Alto Networks PAN‑OS, urges urgent mitigation, and highlights credential leakage risks for Fortinet products, but provides no PoC, exploit, or evidence of active exploitation.
02030143
914 followersView on X
株式会社ブレインディレクション公式@BrainDirection98d
Active Exploitation
本日のセキュリティ速報（7/2）注目の脆弱性・インシデント・🔴 Windows／BlueHammer（CVE-2026-33825）：ランサムウェアグループによる悪用開始を米CISAが確認。6月のマイクロソフト更新プログラム適用が急務。・🔴 Palo Alto Networks PAN-OS：認証回避の脆弱性（CVE-2026-0265）でJPCERT/CCが注意喚起。境界機器のため侵入起点となるリスクが高い。・🔴 Microsoft SharePoint Server：脆弱性の悪用について米当局が注意喚起。オンプレ運用組織は悪用が現実化している前提での対応が必要。・🟡 Check Point製品：認証バイパスの脆弱性（CVE-2026-50751）でJPCERT/CCが注意喚起。PAN-OSと併せゲートウェイ製品への攻撃圧力が継続。詳細・対策↓ https://www.brain-d.jp/news.html?d=2026-07-02#sec-2026-07-02
Post summary
The post reports that CVE‑2026‑33825 (BlueHammer) and other vulnerabilities are actively being exploited in the wild, with U.S. authorities urging immediate patching of affected Microsoft and network security products.
0104074
914 followersView on X
株式会社ブレインディレクション公式@BrainDirection88d
Patch
本日のセキュリティ速報（7/12）注目の脆弱性・インシデント・🔴 Palo Alto Networks／PAN-OS：認証回避の脆弱性（CVE-2026-0265）についてJPCERT/CCが注意喚起。境界防御機器の認証回避は影響が大きく早急な対応が必要。・🔴 Progress ShareFile：セキュリティ上の脅威を受け、Storage Zone Controllerの停止を顧客に緊急要請。悪用切迫の可能性があり継続警戒。・🔴 Fortinet製品：関連する認証情報の漏えいについてJPCERT/CCが注意喚起（前日から継続）。漏えい済み認証情報の悪用リスクがあり資格情報の棚卸しが必要。・🟡 npm「jscrambler 8.14.0」：侵害されたリリースがインストール時にRust製インフォスティーラーを投下するサプライチェーン攻撃。開発環境の認証情報窃取につながる恐れ。・🟡 Check Point製品／MOVEit Transfer：認証バイパス（CVE-2026-50751）および複数脆弱性がそれぞれ公表。いずれも最新版への更新推奨。詳細・対策↓ https://www.brain-d.jp/news.html?d=sec-2026-07-12#sec-2026-07-12
Post summary
The bulletin highlights several newly disclosed vulnerabilities and emphasizes the urgency of applying vendor updates, focusing on patching and mitigation rather than presenting exploits.
02020126
915 followersView on X
株式会社ブレインディレクション公式@BrainDirection100d
Active Exploitation
本日のセキュリティ速報（6/30）注目の脆弱性・インシデント・🔴 ソフツー：検証用サーバーへの不正アクセスで通信記録侵害の恐れ、電話番号15万9850番号が対象（規模大）。・🔴 Palo Alto PAN-OS：認証回避の脆弱性（CVE-2026-0265）、境界機器のため悪用時の影響大でJPCERT/CCが注意喚起。・🔴 SimpleHelp：サポートツールの脆弱性悪用を米当局が確認、すでに実害段階で緊急度が高い。・🔴 Fortinet：製品関連の認証情報漏えいについてJPCERT/CCが注意喚起（認証情報の悪用リスク）。・🟡 Check Point製品：認証バイパスの脆弱性（CVE-2026-50751）、要対応。詳細・対策↓ https://www.brain-d.jp/news.html?d=2026-06-30-2#sec-2026-06-30
Post summary
The bulletin reports that CVE‑2026‑0265 and CVE‑2026‑50751 pose serious risks, with US authorities confirming active exploitation of a support‑tool vulnerability, and lists multiple authentication bypass issues without providing PoC or patch details.
0103063
914 followersView on X

CPE platform detail163 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

163 of 163 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	paloaltonetworks	pan-os	-	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.13	-	-
OS	paloaltonetworks	pan-os	10.2.13	-	-
OS	paloaltonetworks	pan-os	10.2.13	-	-
OS	paloaltonetworks	pan-os	10.2.13	-	-
OS	paloaltonetworks	pan-os	10.2.13	-	-
OS	paloaltonetworks	pan-os	10.2.13	-	-
OS	paloaltonetworks	pan-os	10.2.13	-	-
OS	paloaltonetworks	pan-os	10.2.13	-	-
OS	paloaltonetworks	pan-os	10.2.13	-	-
OS	paloaltonetworks	pan-os	10.2.13	-	-
OS	paloaltonetworks	pan-os	10.2.13	-	-
OS	paloaltonetworks	pan-os	10.2.16	-	-
OS	paloaltonetworks	pan-os	10.2.16	-	-
OS	paloaltonetworks	pan-os	10.2.16	-	-
OS	paloaltonetworks	pan-os	10.2.16	-	-
OS	paloaltonetworks	pan-os	10.2.17	-	-
OS	paloaltonetworks	pan-os	10.2.18	-	-
OS	paloaltonetworks	pan-os	10.2.18	-	-
OS	paloaltonetworks	pan-os	10.2.18	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	11.1.10	-	-
OS	paloaltonetworks	pan-os	11.1.10	-	-
OS	paloaltonetworks	pan-os	11.1.10	-	-
OS	paloaltonetworks	pan-os	11.1.10	-	-
OS	paloaltonetworks	pan-os	11.1.10	-	-
OS	paloaltonetworks	pan-os	11.1.10	-	-
OS	paloaltonetworks	pan-os	11.1.10	-	-
OS	paloaltonetworks	pan-os	11.1.10	-	-
OS	paloaltonetworks	pan-os	11.1.10	-	-
OS	paloaltonetworks	pan-os	11.1.13	-	-
OS	paloaltonetworks	pan-os	11.1.13	-	-
OS	paloaltonetworks	pan-os	11.1.13	-	-
OS	paloaltonetworks	pan-os	11.1.13	-	-
OS	paloaltonetworks	pan-os	11.1.14	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.7	-	-
OS	paloaltonetworks	pan-os	11.1.7	-	-
OS	paloaltonetworks	pan-os	11.1.7	-	-
OS	paloaltonetworks	pan-os	11.1.7	-	-
OS	paloaltonetworks	pan-os	11.2.10	-	-
OS	paloaltonetworks	pan-os	11.2.10	-	-
OS	paloaltonetworks	pan-os	11.2.10	-	-
OS	paloaltonetworks	pan-os	11.2.10	-	-
OS	paloaltonetworks	pan-os	11.2.10	-	-
OS	paloaltonetworks	pan-os	11.2.10	-	-
OS	paloaltonetworks	pan-os	11.2.11	-	-
OS	paloaltonetworks	pan-os	11.2.4	-	-
OS	paloaltonetworks	pan-os	11.2.4	-	-
OS	paloaltonetworks	pan-os	11.2.4	-	-
OS	paloaltonetworks	pan-os	11.2.4	-	-
OS	paloaltonetworks	pan-os	11.2.4	-	-
OS	paloaltonetworks	pan-os	11.2.4	-	-
OS	paloaltonetworks	pan-os	11.2.4	-	-
OS	paloaltonetworks	pan-os	11.2.4	-	-
OS	paloaltonetworks	pan-os	11.2.4	-	-
OS	paloaltonetworks	pan-os	11.2.4	-	-
OS	paloaltonetworks	pan-os	11.2.4	-	-
OS	paloaltonetworks	pan-os	11.2.4	-	-
OS	paloaltonetworks	pan-os	11.2.4	-	-
OS	paloaltonetworks	pan-os	11.2.4	-	-
OS	paloaltonetworks	pan-os	11.2.4	-	-
OS	paloaltonetworks	pan-os	11.2.7	-	-
OS	paloaltonetworks	pan-os	11.2.7	-	-
OS	paloaltonetworks	pan-os	11.2.7	-	-
OS	paloaltonetworks	pan-os	11.2.7	-	-
OS	paloaltonetworks	pan-os	11.2.7	-	-
OS	paloaltonetworks	pan-os	11.2.7	-	-
OS	paloaltonetworks	pan-os	11.2.7	-	-
OS	paloaltonetworks	pan-os	11.2.7	-	-
OS	paloaltonetworks	pan-os	11.2.7	-	-
OS	paloaltonetworks	pan-os	11.2.7	-	-
OS	paloaltonetworks	pan-os	12.1.4	-	-
OS	paloaltonetworks	pan-os	12.1.4	-	-
OS	paloaltonetworks	pan-os	12.1.4	-	-
HW	siemens	ruggedcom_ape1808	-	-	-
OS	siemens	ruggedcom_ape1808_firmware	-	-	-

Explore more

Back to dashboard paloaltonetworks CVEs siemens CVEs pan-os vulnerabilities

What researchers are saying

CVE-2026-0265

Nathan McNulty[verified]@NathanMcNultyGeneral

The post warns that several CVEs enable authentication bypass in VPN architectures, urging removal from the Internet, but provides no PoC, exploit, patch, or evidence of active exploitation.

Harsh Jaiswal[verified]@rootxharshDisclosure

The blog announces an authentication bypass (CVE‑2026‑0265) in Palo Alto PAN‑OS CAS Auth that permits attackers to connect to the GlobalProtect VPN, but no PoC, exploit, or patch is disclosed.

watchTowr[verified]@watchtowrcyberGeneral

The post notes successful reproduction of CVE-2026-0265 and that others will publish, but it lacks any PoC code, exploit details, or patch information, so it is treated as a general mention.

International Cyber Digest[verified]@IntCyberDigestDisclosure

Palo Alto Networks released an advisory for CVE‑2026‑0265, detailing an authentication bypass rated HIGH with a CVSS of 7.2; patches are available and future builds are expected, and no active exploitation has been observed.

Harsh Jaiswal[verified]@rootxharshGeneral

The tweet merely points to a blog post about CVE‑2026‑0265; it provides no explicit details on PoC, exploitation, patches, or technical specifics.

Simo[verified]@SimoKohonenGeneral

The tweet notes that PAN Cortex Xpanse has been continuously scanning for CVE-2026-0265 path identifiers since May 7, but offers no proof of exploitation, PoC, technical details, patch information, or debunking.

nekono_nanomotoni[verified]@nekono_nahaPoC

The post announces that public PoC‑level details for CVE‑2026‑0265 exist, describing an authentication bypass in PAN‑OS’s CAS‑enabled login interfaces, but provides no evidence of active exploitation or patch information.

Nicolas Krassas[verified]@DinosnGeneral

The excerpt merely announces the existence of CVE‑2026‑0265 via a blog title and link, without providing details on PoCs, exploit code, active use, patches, technical specifics, or any debunking claims.