---
id: 3817
title: "Detecting CVE-2026-0265 at Scale: PAN-OS CAS Authentication Bypass"
cve: CVE-2026-0265
cvss: 7.2
severity: high
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/detecting-cve-2026-0265-at-scale-pan-os-cas-authentication-bypass"
published_at: "2026-05-22 00:00"
tags: ["authentication-bypass", "jwt", "palo-alto-networks", "detection-tool", "pan-os", "cve-2026-0265"]
phying_url: "https://phying.com/item/3817"
lang: en
---

# Detecting CVE-2026-0265 at Scale: PAN-OS CAS Authentication Bypass

## Summary

Bishop Fox publishes a detector for CVE-2026-0265, a pre-auth JWT signature bypass in PAN-OS and Panorama reachable when CAS is attached to an auth profile; one anonymous request yields a verdict.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2026-0265
- **CVSS:** 7.2
- **Published:** 2026-05-22 00:00
- **Original:** https://bishopfox.com/blog/detecting-cve-2026-0265-at-scale-pan-os-cas-authentication-bypass
- **Phying News:** https://phying.com/item/3817