{"id":1374,"date":"2026-06-01T02:30:19","date_gmt":"2026-05-31T19:30:19","guid":{"rendered":"https:\/\/vncybers.vn\/canh-bao-lo-hong-bo-qua-xac-thuc-globalprotect-cve-2026-0257-dang-bi-khai-thac-tich-cuc\/"},"modified":"2026-06-01T03:30:11","modified_gmt":"2026-05-31T20:30:11","slug":"canh-bao-lo-hong-bo-qua-xac-thuc-globalprotect-cve-2026-0257-dang-bi-khai-thac-tich-cuc","status":"publish","type":"post","link":"https:\/\/vncybers.vn\/en\/canh-bao-lo-hong-bo-qua-xac-thuc-globalprotect-cve-2026-0257-dang-bi-khai-thac-tich-cuc\/","title":{"rendered":"C\u1ea3nh b\u00e1o: L\u1ed7 h\u1ed5ng b\u1ecf qua x\u00e1c th\u1ef1c GlobalProtect (CVE-2026-0257) \u0111ang b\u1ecb khai th\u00e1c t\u00edch c\u1ef1c"},"content":{"rendered":"<p>H\u1ec7 sinh th\u00e1i an ninh m\u1ea1ng \u0111ang \u0111\u1ed1i m\u1eb7t v\u1edbi m\u1ed9t m\u1ed1i \u0111e d\u1ecda nghi\u00eam tr\u1ecdng m\u1edbi khi l\u1ed7 h\u1ed5ng <strong>CVE-2026-0257<\/strong> trong PAN-OS c\u1ee7a Palo Alto Networks b\u1ecb khai th\u00e1c t\u00edch c\u1ef1c trong th\u1ef1c t\u1ebf. L\u1ed7 h\u1ed5ng n\u00e0y cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng v\u01b0\u1ee3t qua c\u01a1 ch\u1ebf x\u00e1c th\u1ef1c tr\u00ean c\u00e1c c\u1ed5ng GlobalProtect, m\u1edf ra c\u00e1nh c\u1eeda x\u00e2m nh\u1eadp s\u00e2u v\u00e0o h\u1ea1 t\u1ea7ng n\u1ed9i b\u1ed9 c\u1ee7a doanh nghi\u1ec7p.<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/vncybers.vn\/wp-content\/uploads\/2026\/06\/post_image.jpg\" alt=\"Palo Alto Networks Security Solution\" style=\"width: 100%; max-width: 800px; height: auto; display: block; margin: 0 auto 30px auto;\" \/><\/p>\n<h2>C\u01a1 ch\u1ebf khai th\u00e1c l\u1ed7 h\u1ed5ng CVE-2026-0257<\/h2>\n<p>Theo b\u00e1o c\u00e1o ph\u00e2n t\u00edch t\u1eeb <em>Rapid7 MDR<\/em>, k\u1ebb t\u1ea5n c\u00f4ng nh\u1eafm v\u00e0o m\u1ed9t l\u1ed7 h\u1ed5ng logic trong c\u00e1ch PAN-OS x\u1eed l\u00fd c\u00e1c y\u00eau c\u1ea7u API ch\u01b0a \u0111\u01b0\u1ee3c x\u00e1c th\u1ef1c. \u0110i\u1ec3m \u0111\u1eb7c bi\u1ec7t nguy hi\u1ec3m l\u00e0 l\u1ed7 h\u1ed5ng n\u00e0y c\u00f3 th\u1ec3 b\u1ecb khai th\u00e1c t\u1eeb xa m\u00e0 kh\u00f4ng c\u1ea7n b\u1ea5t k\u1ef3 th\u00f4ng tin \u0111\u0103ng nh\u1eadp n\u00e0o t\u1eeb tr\u01b0\u1edbc.<\/p>\n<p>\u0110i\u1ec1u ki\u1ec7n \u0111\u1ec3 cu\u1ed9c t\u1ea5n c\u00f4ng th\u00e0nh c\u00f4ng th\u01b0\u1eddng bao g\u1ed3m:<\/p>\n<ul>\n<li>D\u1ecbch v\u1ee5 x\u00e1c th\u1ef1c \u0111\u00e1m m\u00e2y (Cloud Authentication Service &#8211; CAS) b\u1ecb v\u00f4 hi\u1ec7u h\u00f3a tr\u00ean thi\u1ebft b\u1ecb.<\/li>\n<li>T\u00ednh n\u0103ng ghi \u0111\u00e8 cookie x\u00e1c th\u1ef1c (Authentication Override Cookies) \u0111\u01b0\u1ee3c b\u1eadt cho Portal ho\u1eb7c Gateway c\u1ee7a GlobalProtect.<\/li>\n<\/ul>\n<p>Khi c\u00e1c \u0111i\u1ec1u ki\u1ec7n n\u00e0y h\u1ed9i \u0111\u1ee7, tin t\u1eb7c c\u00f3 th\u1ec3 g\u1eedi c\u00e1c y\u00eau c\u1ea7u HTTP \u0111\u01b0\u1ee3c ch\u1ebf t\u1ea1o \u0111\u1eb7c bi\u1ec7t \u0111\u1ec3 m\u1ea1o danh m\u1ed9t phi\u00ean l\u00e0m vi\u1ec7c h\u1ee3p l\u1ec7, t\u1eeb \u0111\u00f3 b\u1ecf qua ho\u00e0n to\u00e0n c\u00e1c l\u1edbp b\u1ea3o m\u1eadt bi\u00ean.<\/p>\n<h2>Ph\u00e2n t\u00edch h\u00e0nh vi t\u1eeb th\u1ef1c t\u1ebf<\/h2>\n<p>C\u00e1c chuy\u00ean gia t\u1ea1i Rapid7 \u0111\u00e3 quan s\u00e1t th\u1ea5y chi\u1ebfn d\u1ecbch khai th\u00e1c b\u1eaft \u0111\u1ea7u r\u1ea7m r\u1ed9 t\u1eeb ng\u00e0y 17\/05\/2026. M\u1eb7c d\u00f9 l\u1ed7 h\u1ed5ng n\u00e0y ban \u0111\u1ea7u \u0111\u01b0\u1ee3c \u0111\u00e1nh gi\u00e1 \u1edf m\u1ee9c trung b\u00ecnh (CVSS 4.0 &#8211; 5.0), nh\u01b0ng c\u00e1c v\u1ee5 vi\u1ec7c th\u1ef1c t\u1ebf cho th\u1ea5y tin t\u1eb7c \u0111\u00e3 s\u1eed d\u1ee5ng n\u00f3 nh\u01b0 m\u1ed9t b\u01b0\u1edbc \u0111\u1ec7m (foothold) \u0111\u1ec3 th\u1ef1c hi\u1ec7n c\u00e1c h\u00e0nh vi leo thang \u0111\u1eb7c quy\u1ec1n th\u1ea7m l\u1eb7ng.<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/vncybers.vn\/wp-content\/uploads\/2026\/06\/pan-os-monitor-gpsrv.png\" alt=\"Palo Alto Networks Management Interface showing authentication alerts\" style=\"width: 100%; max-width: 800px; height: auto; display: block; margin: 0 auto 30px auto;\" \/><\/p>\n<h2>Bi\u1ec7n ph\u00e1p \u1ee9ng ph\u00f3 v\u00e0 gi\u1ea3m thi\u1ec3u r\u1ee7i ro<\/h2>\n<p>Palo Alto Networks \u0111\u00e3 ph\u00e1t h\u00e0nh c\u00e1c b\u1ea3n v\u00e1 kh\u1ea9n c\u1ea5p cho PAN-OS. C\u00e1c t\u1ed5 ch\u1ee9c \u0111\u01b0\u1ee3c khuy\u1ebfn c\u00e1o:<\/p>\n<ul>\n<li><strong>N\u00e2ng c\u1ea5p ngay l\u1eadp t\u1ee9c:<\/strong> Ki\u1ec3m tra phi\u00ean b\u1ea3n PAN-OS hi\u1ec7n t\u1ea1i v\u00e0 \u00e1p d\u1ee5ng b\u1ea3n v\u00e1 m\u1edbi nh\u1ea5t t\u1eeb nh\u00e0 cung c\u1ea5p.<\/li>\n<li><strong>R\u00e0 so\u00e1t c\u1ea5u h\u00ecnh:<\/strong> V\u00f4 hi\u1ec7u h\u00f3a t\u00ednh n\u0103ng Authentication Override n\u1ebfu kh\u00f4ng th\u1ef1c s\u1ef1 c\u1ea7n thi\u1ebft v\u00e0 \u0111\u1ea3m b\u1ea3o CAS \u0111\u01b0\u1ee3c c\u1ea5u h\u00ecnh \u0111\u00fang c\u00e1ch.<\/li>\n<\/ul>\n<p style=\"text-align: right; margin-top: 40px;\"><strong><em>VNCyberS<\/em><\/strong><br \/><em>T\u1ed5ng h\u1ee3p t\u1eeb Rapid7 v\u00e0 Palo Alto Networks<\/em><\/p>","protected":false},"excerpt":{"rendered":"<p>H\u1ec7 sinh th\u00e1i an ninh m\u1ea1ng \u0111ang \u0111\u1ed1i m\u1eb7t v\u1edbi m\u1ed9t m\u1ed1i \u0111e d\u1ecda nghi\u00eam tr\u1ecdng m\u1edbi khi l\u1ed7 h\u1ed5ng CVE-2026-0257 trong PAN-OS c\u1ee7a Palo Alto Networks b\u1ecb khai th\u00e1c t\u00edch c\u1ef1c trong th\u1ef1c t\u1ebf. L\u1ed7 h\u1ed5ng n\u00e0y cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng v\u01b0\u1ee3t qua c\u01a1 ch\u1ebf x\u00e1c th\u1ef1c tr\u00ean c\u00e1c c\u1ed5ng GlobalProtect, m\u1edf ra [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":1373,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1374","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tin-tuc"],"_links":{"self":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1374","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/comments?post=1374"}],"version-history":[{"count":18,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1374\/revisions"}],"predecessor-version":[{"id":1443,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1374\/revisions\/1443"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media\/1373"}],"wp:attachment":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media?parent=1374"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/categories?post=1374"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/tags?post=1374"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}