PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Detecting CVE-2026-0265 at Scale: PAN-OS CAS Authentication Bypass

bishopfox.com | vulnerability | High | CVE-2026-0265 | #authentication-bypass | #jwt | #palo-alto-networks | #detection-tool | #pan-os | #cve-2026-0265
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bishop Fox publishes a detector for CVE-2026-0265, a pre-auth JWT signature bypass in PAN-OS and Panorama reachable when CAS is attached to an auth profile; one anonymous request yields a verdict.
CVE
CVE-2026-0265
CVSS
7.2
Published
Collected

Related coverage

vulnerability · bishopfox.com
Bishop Fox ASM Delivers 24-Hour Head Start Against Critical PAN-OS Vulnerability
Case study: Bishop Fox's Cosmos fingerprinted PAN-OS assets and warned customers about CVE-2024-0012 a full 24 hours before public exploits spread, leveraging firmware diffing and CPE matching.
vulnerability · bishopfox.com
PAN-OS CVE-2024-3400: Patch Your Palo Alto Firewalls
Bishop Fox shares details on PAN-OS CVE-2024-3400, a critical pre-auth RCE chain in GlobalProtect, including bypasses of Palo Alto's interim mitigations and new Threat Prevention rule IDs.
vulnerability · blog.viettelcybersecurity.com
CVE-2026-55040: SharePoint Server Subscription Edition improper JWT validation lead to Arbitrary Account Login
CVE-2026-55040: SharePoint Server Subscription Edition's token handler skips JWT signature validation, letting attackers forge Bearer tokens and log in as arbitrary accounts, including site admins.
vulnerability · wiz.io
Critical Buffer Overflow Vulnerability in PAN-OS Exploited in-the-Wild
CVE-2026-0300: a buffer overflow in PAN-OS User-ID Authentication Portal (CVSS 9.3) allows unauthenticated root RCE, with limited in-the-wild exploitation of exposed instances; patching advised.
tool · github.com
CVE-2026-55040 PoC: Microsoft SharePoint JWT authentication bypass
The public PoC can generate a forged authentication token for a specified account, substantially lowering the barrier to validation and reproduction. Apply Microsoft security updates immediately and test only in isolated, authorized environments.
blog · hacktron.ai
When Your VPN Opens Your Private Network to the Public
AI-assisted reverse engineering of stripped PAN-OS binaries uncovered a JWT algorithm confusion flaw in GlobalProtect's Cloud Authentication Service, enabling VPN auth bypass with just a username.
Back