Palo Alto Patches PAN-OS Remote-Code Flaw Under Active Exploitation

Palo Alto Networks has released security updates for CVE-2026-0322, a high-severity remote code execution vulnerability in PAN-OS that is reportedly under active, though limited, exploitation. The flaw affects the management interfaces of PA-Series and VM-Series firewalls and Panorama. An authenticated attacker with network access could execute arbitrary code with root privileges. Palo Alto Networks said no special configuration is required to exploit the vulnerability.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-0322 to its Known Exploited Vulnerabilities (KEV) catalog. Federal agencies must apply the patches by October 17, 2026.

Palo Alto Networks recommends restricting access to the management interface to trusted internal IP addresses to mitigate the risk.