https://poc.intelseclab.com/tags/pan-os/Latest proof-of-concept entries.Hugoen-usWed, 01 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-01_cve-2026-0257-pan-os-globalprotect-auth-bypass/Wed, 01 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-01_cve-2026-0257-pan-os-globalprotect-auth-bypass/High severity (CVSS 7.8) — web · CVE-2026-0257. Status: PoC. Affects: Palo Alto Networks PAN-OS — GlobalProtect portal and gateway (also affects certain Prisma Access deployments). Tags: auth-bypass, VPN, GlobalProtect, PAN-OS, Palo-Alto, certificate-bypass, cookie-forgery, Prisma-Access, unauthenticated.webHighauth-bypassVPNGlobalProtectPAN-OSPalo-Altocertificate-bypasscookie-forgeryPrisma-Accessunauthenticatedhttps://poc.intelseclab.com/pocs/web/2026-05-17_pan-os-globalprotect-unauth-rce/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_pan-os-globalprotect-unauth-rce/Critical severity (CVSS 10) — web · CVE-2024-3400. Status: Weaponized. Affects: Palo Alto Networks PAN-OS GlobalProtect gateway. Tags: RCE, command-injection, path-traversal, PAN-OS, GlobalProtect, unauthenticated, zero-day.webCriticalRCEcommand-injectionpath-traversalPAN-OSGlobalProtectunauthenticatedzero-dayhttps://poc.intelseclab.com/pocs/web/2026-05-16_pan-os-management-auth-bypass/Sat, 16 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-16_pan-os-management-auth-bypass/Critical severity (CVSS 9.1) — web · CVE-2025-0108. Status: Weaponized. Affects: Palo Alto Networks PAN-OS management web interface. Tags: auth-bypass, path-traversal, PAN-OS, Palo Alto, management-interface, unauthenticated.webCriticalauth-bypasspath-traversalPAN-OSPalo Altomanagement-interfaceunauthenticated