Project

PAN-OS

PAN-OS is Palo Alto Networks' operating system for its PA-Series and VM-Series firewalls and Panorama management, including the GlobalProtect VPN feature.

Known aliases

PanOS
PAN-OS firewall software
PAN-OS GlobalProtect
PAN-OS software

Current stories

leadershipOne report1 publisher

Palo Alto's May advisory reports exploit attempts on a GlobalProtect VPN bypass for cookie-enabled firewalls

Palo Alto Networks' May 13, 2026 advisory for CVE-2026-0257 rates the 7.8-score GlobalProtect bypass at highest urgency after limited exploit attempts. Exposure needs authentication override cookies plus a specific certificate setup, and the fix costs users one re-login.

Publishers:security.paloaltonetworks.com

Reality

Evidence55
Adoption: Not scored
Hype gap: Not scored
Incentives: Not scored
Confidence60

securityConfirmed5 publishers

Palo Alto confirms exploitation of CVE-2026-0322, a PAN-OS management flaw that grants root

Palo Alto Networks patched CVE-2026-0322 (CVSS 8.6), a PAN-OS management RCE it says is under limited exploitation. CISA gave federal agencies until October 17; exploiting it takes a valid login and network access to the management interface.

Publishers:bleepingcomputer.com dev.to security.paloaltonetworks.com securityweek.com thehackernews.com

Perspective Coverage

5 publishers

Builder: Builder 8%
Operator: Operator 80%
Investor: Investor 12%

Reality

Evidence78
Adoption: Not scored
Hype gap+10
Incentives: Not scored
Confidence80

securityConfirmed3 publishers

CISA gives agencies until October 17 to fix four exploited bugs in Cisco, Palo Alto and Ahsay products

CISA added four exploited flaws in PAN-OS, Cisco Secure Email Gateway and AhsayCBS to KEV with an October 17 federal deadline. We would take the Cisco gateway first, then AhsayCBS servers already patched once, then PAN-OS.

Publishers:cisa.gov helpnetsecurity.com securityaffairs.com

Perspective Coverage

3 publishers

Builder: Builder 20%
Operator: Operator 75%
Investor: Investor 5%

Reality

Evidence80
Adoption: Not scored
Hype gap0
Incentives: Not scored
Confidence78

buildOne report1 publisher

FortiOS blocks central NAT while a single policy still references a VIP

Moving an ASA or PAN-OS rulebase onto a FortiGate means picking the NAT model on an empty appliance, because the toggle that gives back one shared NAT table is gated on every VIP and IP pool reference in the policy set.

Publishers:dev.to

Reality

Evidence62
Adoption: Not scored
Hype gap−5
Incentives30
Confidence58

securityOne report1 publisher

Sixteen Metasploit modules reduce this quarter's advisories to one-command checks

Rapid7 describes eleven of the sixteen additions, and eight of those are scanners rather than exploits. The unauthenticated file reads and SQL injections carry the real pressure this quarter, well ahead of the two Tenable modules.

Publishers:blog.rapid7.com

Reality

Evidence63
Adoption34
Hype gap+24
Incentives69
Confidence58

securityOne report1 publisher

Unit 42's Credential Brief: Hunt The Login That Succeeds Right After The Failures

TheHatman's claimed Entra haul and the FortiBleed spraying wave share one detectable seam: a successful authentication landing just behind a spike of failures.

Publishers:unit42.paloaltonetworks.com

Reality

Evidence46
Adoption58
Hype gap+12
Incentives78
Confidence44