Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation

Palo Alto Networks has patched a high-severity authenticated remote code execution vulnerability, CVE-2026-0322, in PAN-OS software that is under active exploitation. The flaw allows an authenticated attacker with network access to execute arbitrary code with root privileges on affected firewalls. Exploitation attempts have been observed from specific IP addresses, and the U.S. CISA has added the CVE to its Known Exploited Vulnerabilities catalog, mandating federal agencies to apply patches by October 17, 2026.

AI-extracted · verify before operational use