Palo Alto Networks has released security updates addressing a high-severity remote code execution vulnerability in PAN-OS, identified as CVE-2026-0322. The flaw affects the management interface of PA-Series and VM-Series firewalls, as well as Panorama and M-Series appliances, allowing authenticated attackers with network access to execute code with root privileges. The company confirmed limited active exploitation of the vulnerability in targeted attacks and assigned it a severity score of 8.6.
Palo Alto Networks has released patches for affected PAN-OS versions 10.2, 11.1, 11.2, 12.1, and 12.2, with an additional fix expected for version 11.2.16 on October 15. The company recommends restricting management interface access to trusted internal IP addresses and notes that no workarounds exist, though Threat Prevention signatures offer limited protection. The U.S. Cybersecurity and Infrastructure Security Agency has added the vulnerability to its Known Exploited Vulnerabilities catalog and requires federal civilian agencies to address it by October 17.
Source: Read the full story at BleepingComputer
This summary was written with AI assistance from the linked source.
Send this to yourself, or to someone who should see it
Enter your email and we will send you a link to this article.
