Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks

Palo Alto Networks has disclosed a high-severity remote code execution (RCE) vulnerability in PAN-OS, tracked as CVE-2026-0322, that has been actively exploited in limited attacks. The flaw affects the management interface of PA-Series, VM-Series, Panorama, and M-Series appliances, allowing authenticated attackers with network access to execute code as root. Exploitation requires valid credentials and access to the management interface, and no workarounds exist aside from restricting access and applying updates. Palo Alto Networks has released patches for multiple PAN-OS versions and identified three malicious IP addresses involved in the attacks.

AI-extracted · verify before operational use