Palo Alto Networks warns of exploited PAN-OS RCE flaw
Palo Alto Networks released fixes for a high-severity PAN-OS RCE zero-day, CVE-2026-0322, that has been exploited in attacks on firewalls. The flaw affects the PAN-OS management interface in PA-Series, VM-Series, Panorama and M-Series, and CISA added it to its Known Exploited Vulnerabilities catalog with an October 17 deadline.
- CVE-2026-0322 scores 8.6 and allows code execution as root
- Affects PA-Series, VM-Series, Panorama and M-Series; Cloud NGFW and Prisma Access unaffected
- Fixes released for PAN-OS 10.2, 11.1, 11.2, 12.1 and 12.2, with 11.2.16 due October 15
- CISA orders federal agencies to mitigate by October 17
Read next
Security