CVE-2026-0265: Authentication Bypass in Palo Alto Networks PAN-OS
AdvisoryPAN-OSHacktronAIPalo Alto Networks PA-Series/VM-SeriesBelow is the opening; the full story is at Rapid7 Blog.
From Rapid7 Blog
Overview
On May 13, 2026, Palo Alto Networks published a CVE-2026-0265">security advisory for CVE-2026-0265">CVE-2026-0265, a signature verification vulnerability that facilitates authentication bypass on PAN-OS, the operating system that most Palo Alto Networks firewalls run. This vulnerability allows a remote unauthenticated attacker with network access to bypass authentication when Cloud Authentication Service (CAS) is enabled and attached to a login interface; the vulnerable configuration is non-default but common. CVE-2026-0265 affects PAN-OS on PA-Series and VM-Series firewalls, as well as Panorama (virtual and M-Series) appliances. Cloud NGFW and Prisma Access are not affected.…
Worried this affects your company?
Discuss a security assessment of your internet-facing systems. Scope agreed before testing.