Prisma-Access

PAN-OS GlobalProtect Authentication Bypass via Forged Cookie (CVE-2026-0257)

CVE-2026-0257 is an authentication bypass in the GlobalProtect portal and gateway components of PAN-OS. In configurations where the same TLS certificate is reused for both the HTTPS service and the authentication-override cookie's encryption/decryption, an…