This vulnerability (CVE-2026-0257) affects the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS software, enabling authentication bypass due to improper reliance on cookies lacking validation and integrity checks (CWE-565). Attackers exploiting this issue can circumvent security controls to establish unauthorized VPN connections. The issue does not impact Panorama or Cloud NGFW products. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, but with high scope and impact on confidentiality and integrity. No patch or official remediation level has been disclosed by the vendor yet.

Successful exploitation allows attackers to bypass authentication mechanisms on the GlobalProtect portal and gateway, potentially granting unauthorized VPN access. This could lead to unauthorized network access and potential data exposure. However, the impact is limited to these components, as Panorama and Cloud NGFW are not affected. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, organizations should monitor vendor communications for updates and consider additional compensating controls around GlobalProtect portal and gateway access where feasible. No vendor advisory indicating 'no action required' or existing mitigation is currently available.