PAN-OS GlobalProtect VPN login without MFA (CVE-2026-0257)

ills3c Intel&Coffee@Ills3C

•updated 5 days ago•3•0•7

Detects successful Palo Alto GlobalProtect VPN authentications where no Multi-Factor Authentication (MFA) challenge or related text is recorded in the firewall logs, and no corresponding successful MFA sign-in event is found in Entra ID (SigninLogs).