A vulnerability in Palo Alto Networks' PAN-OS GlobalProtect VPN allows attackers to bypass authentication and gain unauthorized access, with active exploitation reported since mid-May. Organizations are urged to apply the vendor's patch immediately or implement cybersecurity measures to mitigate the risk.
The most actionable takeaway for you is to treat the Palo Alto Networks PAN-OS GlobalProtect VPN vulnerability (CVE-2026-0257) as a critical issue despite its medium severity CVSS score. Since it's actively being exploited, ensure your organization applies the vendor-supplied patch immediately or implements mitigation strategies, such as using dedicated certificates for authentication-override cookies and disabling the authentication override feature to prevent unauthorized VPN access.