You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
globalprotect
About this tag
GlobalProtect is Palo Alto Networks' VPN and secure access solution, often deployed on PAN-OS firewalls. Recent discussions on WindowsForum highlight critical vulnerabilities in GlobalProtect, particularly CVE-2026-0257, an authentication bypass flaw added to CISA's Known Exploited Vulnerabilities catalog due to active exploitation. Sysadmins and IT professionals are urged to patch PAN-OS immediately and audit trust-boundary configurations, as attackers target VPN gateways to compromise enterprise networks. Additional threads cover privilege escalation flaws in Palo Alto products and cross-site scripting risks in industrial platforms like Siemens RUGGEDCOM, emphasizing the broader security challenges facing Windows-heavy enterprises relying on remote access infrastructure.
Palo Alto Networks disclosed CVE-2026-0257 on May 13, 2026, then updated the advisory on May 29 after exploitation attempts were observed against unpatched PAN-OS devices running GlobalProtect portal or gateway configurations without mitigations. For WindowsForum’s sysadmin and IT-pro audience...
On May 29, 2026, CISA added CVE-2026-0257, a Palo Alto Networks PAN-OS GlobalProtect authentication bypass vulnerability under active exploitation, to its Known Exploited Vulnerabilities catalog, requiring U.S. federal civilian agencies to remediate it by the catalog deadline. The alert is...
Palo Alto Networks recently took critical action to reinforce the security of its product line by addressing a series of privilege escalation vulnerabilities and integrating the latest Chrome patches into its solutions. These fixes, targeting multiple high-profile flaws, come at a pivotal moment...
Siemens RUGGEDCOM APE1808 Cross-Site Scripting Vulnerability: Critical Insights for Industrial and ICS Defenders
Cybersecurity in industrial environments has never been more consequential, particularly as the line between operational technology (OT) and information technology (IT) continues to...