Security1 hOctober 17, 2026, 21:00

Palo Alto patches actively exploited PAN-OS management RCE

Palo Alto Networks disclosed CVE-2026-0322, a code-injection flaw in the PAN-OS management interface that lets an authenticated attacker with network access run code as root. CISA added it to its Known Exploited Vulnerabilities catalog with an October 17 federal deadline; fixes ship in 10.2.18-h12, 11.1.16-h3, 11.2.16, 12.1.10-h2 and 12.2.4.

DEV Community

Open source

Palo Alto patches actively exploited PAN-OS management RCE

CVSS 8.6, CWE-94 code injection leading to root execution
CISA set an October 17 deadline for federal civilian agencies
Palo Alto published three attacker IPs, including 66.42.72.14
Jump-box restrictions cut the score only from 8.6 to 8.5

#PaloAlto#PAN-OS#CISA

Palo Alto VPN flaw CVE-2026-0257 still exploited by Qilin and Settra

Security

CVE-2026-0322 in PAN-OS: RCE in management interface, CVSS 8.6

Security

CISA adds four exploited flaws in Palo Alto, Cisco and Ahsay to KEV catalog

Security

Palo Alto patches actively exploited PAN-OS management RCE

Palo Alto VPN flaw CVE-2026-0257 still exploited by Qilin and Settra

CVE-2026-0322 in PAN-OS: RCE in management interface, CVSS 8.6

CISA adds four exploited flaws in Palo Alto, Cisco and Ahsay to KEV catalog

Palo Alto report: 68% of critical infrastructure firms lack OT asset visibility