2026-05-31: Palo Alto GlobalProtect VPN suffers active exploitation of an authentication bypass (CVE-2026-0257

Show Notes - 2026-05-31

Stories Covered

• Today:
• Palo Alto GlobalProtect VPN Authentication Bypass (CVE-2026-0257) [Critical Alerts]
• CIFSwitch Linux Privilege Escalation [Critical Alerts]
• Flowise AI Platform RCE (CVE-2026-40933) [Critical Alerts]
• Russian Intelligence Technology Procurement Escalation [Business & Infrastructure Threats]
• GnuTLS Certificate Validation Bypass Flaws [Vulnerability Disclosures]
• Additional Certificate Validation Flaws [Vulnerability Disclosures]
• KubeVirt Security Flaws [Vulnerability Disclosures]
• Node.js Permission Model Flaws [Vulnerability Disclosures]
• Other Disclosed Vulnerabilities [Vulnerability Disclosures]
• Microsoft Incident Response Criticized [General Security News]

CVEs Referenced

CVE-2024-22018, CVE-2024-36137, CVE-2025-15649, CVE-2025-23167, CVE-2026-0257, CVE-2026-40034, CVE-2026-40510, CVE-2026-40528, CVE-2026-40933, CVE-2026-42012, CVE-2026-42013, CVE-2026-42015, CVE-2026-42789, CVE-2026-42790, CVE-2026-44839, CVE-2026-46242, CVE-2026-48864, CVE-2026-48962, CVE-2026-5260, CVE-2026-7374, CVE-2026-9804

Read the full brief