Actively exploited vulnerabilities affecting Palo Alto Networks products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2026-0257https://wildfortech.com/security#CVE-2026-0257This authentication bypass in Palo Alto Networks PAN-OS allows attackers to circumvent security controls and establish unauthorized VPN connections without valid credentials. Because it bypasses authentication entirely, an attacker gains network-level access that would normally require legitimate user credentials. The vulnerability is already being exploited in ransomware campaigns, meaning active threat actors are using it to gain footholds inside enterprise networks right now, making rapid response critical.Fri, 29 May 2026 00:00:00 GMTPalo Alto NetworksPAN-OShttps://wildfortech.com/security#CVE-2026-0300https://wildfortech.com/security#CVE-2026-0300This critical flaw in Palo Alto Networks PAN-OS allows an unauthenticated attacker to send specially crafted packets to the User-ID Authentication Portal (Captive Portal) service and execute arbitrary code with root privileges on PA-Series and VM-Series firewalls. Because no authentication is required and the attacker gains full root access, a successful exploit could mean complete compromise of the firewall itself — the device meant to protect the network perimeter.Wed, 06 May 2026 00:00:00 GMTPalo Alto NetworksPAN-OS