
Security researchers at ReliaQuest have observed attackers infiltrating internal networks by mimicking legitimate employee traffic through compromised VPN gateways. This exploitation targets CVE-2026-0257, a high-severity authentication bypass vulnerability found in Palo Alto Networks’ PAN-OS GlobalProtect and Prisma Access services. The flaw is particularly insidious because it allows unauthorized actors to establish active VPN sessions without needing valid credentials, effectively neutralizing










