Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access
Affected vendors and products
More on Authentication
Other advisories
- CriticalCVE-2026-114509Laravel TokenGuard authentication bypass through non-string API credentials
- CriticalCVE-2026-114509Laravel TokenGuard authentication bypass through non-string API credentials
- Not ratedosv:CVE-2026-55463Goobi viewer: WebSocket endpoints lack server-side authentication and origin validation
- Not ratedosv:CVE-2026-57207NetBox MCP Server: HTTP transport exposes all NetBox data without authentication
- Not ratedosv:CVE-2026-56836PraisonAI recipe serve Typer command bypasses the non-localhost authentication guard
- MediumCVE-2025-30053The CGM CLININET application runs the cgm-updater process listening on an open network port without any authentication.
- HighCVE-2025-30052The rsyncd service of the CGM CLININET is vulnerable to Authentication Bypass via IP spoofing. Access is granted based solely on the client's source IP addre…
- Not ratedosv:CVE-2026-86055Part-DB: Password Reset Link Poisoning via Host Header Injection leads to pre-authentication Account Takeover
Other news entries
- Dual BIOS: The laptop security feature SMBs don’t know they needNewsCSO Online
- HPE patches eight max severity RCE and auth bypass AOS flawsNewsBleepingComputer
- Cisco Patches 34 Vulnerabilities Across Multiple ProductsNewsSecurityWeek
- Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFANewsThe Hacker News
- CJIS v6.1 Compliance: 5 Practical Priorities for AgenciesNewsBleepingComputer
- Ivanti ICS Zero-Day Attacks Highlight Vendor Patching HurdlesNewsDark Reading
- Hackers abuse the Ivanti Connect Secure bug to gain access without accountsNewsCSO Online
- An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.NewsThe Hacker News
Source: https://thehackernews.com/2026/07/qilin-ransomware-attackers-exploit-pan.html
ID