Topic

Cve 2026 0257

Coverage tagged cve 2026 0257.

Articles: 1
Desk: 1

Data graphic: GlobalProtect, a ransomware door. CVE-2026-0257 scores CVSS 9.1 at NVD and 7.8 at Palo Alto; Qilin and Inc use it in seven steps: forged override cookie, MFA skipped, VPN session, RMM, RDP and SMB, vCenter, ESXi controls off, DC credentials dumped. It is ransomware-used, on CISA KEV since 29 May, and patched since 13 May.

criticalExploits Cve 2026 0257

Qilin and Inc Ransomware Walk Through a Patched GlobalProtect Hole, CVE-2026-0257, Straight Past MFA

Unit 42 ties Qilin and Inc ransomware to GlobalProtect auth bypass CVE-2026-0257: forged cookies skip MFA, then attackers pivot to vCenter and ESXi.

Oct 24 · 5 min