GlobalProtect CVE-2026-0257: Your VPN's TLS Certificate Is the Key to Its Own Bypass

Palo Alto Networks disclosed CVE-2026-0257 on 13 May 2026 and shipped fixes through 28 May. Five months later, Qilin and Inc ransomware operators are using it to walk into networks without credentials