Tag: vpn flaw

2 articles

Cisco security appliance on a rack surrounded by networking equipment indoors.

Cisco Warns of Active Exploitation of VPN Flaw in ASA, FTD Software

Cisco warns that a high-severity VPN flaw, CVE-2026-20349, is being actively exploited, allowing attackers to send crafted HTTP requests that can cause affected devices to reload and disrupt operations. This denial-of-service vulnerability can be triggered remotely without authentication, making it a critical threat.

Analyst 207
Network equipment sits in a brightly-lit corporate office setting.

Palo Alto Networks Warns of Active Exploitation of GlobalProtect VPN Flaw

Palo Alto Networks has warned of active exploitation of a critical GlobalProtect VPN flaw, CVE-2026-0257, which allows attackers to bypass security controls and set up unauthorized VPN connections. The company first observed exploitation attempts on May 17, 2026.

Analyst 207