7.8 CVSS. Not the problem.
Palo Alto Networks' PAN-OS and Prisma Access are under active exploitation due to CVE-2026-0257, a medium-severity authentication bypass vulnerability. The flaw allows attackers to set up unauthorized VPN connections, highlighting the importance of timely patching.
The conventional reading misses that 42% of exploited vulnerabilities in 2025 were weaponized before public disclosure, according to CrowdStrike's Global Threat Report 2026. This pattern exposes a systemic failure in patch governance.
The defensive math: -> Review PAN-OS and Prisma Access configurations to ensure necessary patches are applied within 14 days, reducing the exploitation window. -> Implement a vulnerability exploitation-window reduction program, aiming to decrease the median patch-to-exploit time to under 187 days. -> Conduct regular audits of VPN connections to detect unauthorized access, leveraging statistics like the 89% increase in AI-enabled adversaries in 2025.
Can your team apply the necessary patches for CVE-2026-0257 within the next 72 hours?