Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257 (Updated October 19)
Ransomware operators including Spikey Scorpius (aka Qilin) and Tarnished Scorpius (aka Inc) are exploiting PAN-OS vulnerability CVE-2026-0257. The post Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257 (Updated October 19) appeared first on Unit 42.
Sources
Vulnerabilities
Why this score
| Signal | Points |
|---|---|
| kev added | 50 |
| kev short fuse — 3 days to remediate | 15 |
| kev ransomware | 10 |
| epss high | 20 |
| public poc — 7 repositories | 20 |
| widely deployed | 15 |