CVE-2026-0257

CVSS

—

EPSS

0.969 (99.9th percentile)

CISA KEV

Added 2026-05-29, due 2026-06-01

Exploitation

No report

Public exploits

7 repositories

State

Unknown

Coverage

• 

  ● Actively exploitedCritical 100Unit 42◆Authoritative. Authoritative publisher: a primary source, or a newsroom with formal editorial standards2 hours ago

  Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257 (Updated October 19)

  Ransomware operators including Spikey Scorpius (aka Qilin) and Tarnished Scorpius (aka Inc) are exploiting PAN-OS vulnerability CVE-2026-0257. The post Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257 (Updated October 19) appeared first on Unit 42.

  ↗unit42.paloaltonetworks.com/active-exploitation…(opens the publisher's site in a new tab)

What we observed

1. 24 Sept, 12:30poc publishedpoc-in-github
2. 24 Sept, 12:15poc publishedpoc-in-github
3. 24 Sept, 11:52poc publishedpoc-in-github
4. 24 Sept, 11:50kev addedcisa-kev