14 days. Not the patch window.
PAN-OS vulnerability CVE-2026-0257 is under active exploitation by threat actors, with a CVSS score indicating high severity. The technical mechanics involve remote code execution via a crafted HTTP request.
What everyone reads as a vulnerability problem is actually a patch governance failure. 42% of exploited vulnerabilities in 2025 were weaponized before public disclosure, according to CrowdStrike's Global Threat Report 2026.
The defensive math: -> Prioritize patching of PAN-OS systems within 7 days to mitigate exploitation risk -> Implement a regular review of exposure to widely-used enterprise products to identify potential vulnerabilities -> Conduct an audit of current patch governance policies to ensure timely updates
Can your team patch 100% of critical systems within the next 14 days?