Vendors and CVEs › Vendors › Palo Alto Networks
Palo Alto Networks: industrial cyber security news and vulnerabilities
2 stories in Industrial Cyber Brief name Palo Alto Networks, 2 on CISA’s list of known exploited flaws, from Monday 19 October 2026 to Thursday 22 October 2026. Newest first; each links the full story with who is affected and what to do.
The stories
High Known exploited
Ransomware groups exploit Palo Alto GlobalProtect VPN flaw since June
Several ransomware groups are exploiting CVE-2026-0257, an authentication bypass in PAN-OS GlobalProtect patched in May.
High Known exploited
Fortinet flaws used to plant hidden malware on firewalls
Unit 42 found attackers exploited FortiManager flaw CVE-2024-47575 at a telecoms managed service provider in September 2024, stealing data tied to over 500 FortiGate firewalls.