Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Detecting CVE-2026-0265 at Scale: PAN-OS CAS Authentication Bypass

bishopfox.com | vulnerability | High | CVE-2026-0265 | #authentication-bypass | #jwt | #palo-alto-networks | #detection-tool | #pan-os | #cve-2026-0265

Summary

Bishop Fox publishes a detector for CVE-2026-0265, a pre-auth JWT signature bypass in PAN-OS and Panorama reachable when CAS is attached to an auth profile; one anonymous request yields a verdict.
CVSS
7.2
Published
Collected

original ↗

Related coverage

  1. Bishop Fox ASM Delivers 24-Hour Head Start Against Critical PAN-OS Vulnerability (bishopfox.com)
  2. PAN-OS CVE-2024-3400: Patch Your Palo Alto Firewalls (bishopfox.com)
  3. CVE-2026-55040: SharePoint Server Subscription Edition improper JWT validation lead to Arbitrary Account Login (blog.viettelcybersecurity.com)
  4. Critical Buffer Overflow Vulnerability in PAN-OS Exploited in-the-Wild (wiz.io)
  5. CVE-2026-55040 PoC: Microsoft SharePoint JWT authentication bypass (github.com)
  6. CVE-2026-82329: Unauthenticated Administrative Access in JFrog Artifactory via an Empty Cluster Join Key (bishopfox.com)

back