Palo Alto Patches Actively Exploited PAN-OS RCE Flaw
A critical remote code execution flaw in Palo Alto's PAN-OS is being actively exploited. The vendor has released patches to address the vulnerability.
TL;DR
- CVE-2026-0322 is a high-severity RCE flaw in PAN-OS management interface.
- The vulnerability is being actively exploited in the wild.
- An authenticated attacker can execute arbitrary code remotely.
- Organizations using PAN-OS should apply patches immediately.
- The issue affects multiple versions of the firewall operating system.
Palo Alto Networks has disclosed and patched a critical remote code execution vulnerability in its PAN-OS software. Tracked as CVE-2026-0322, the flaw resides in the management interface and is already being exploited by threat actors.
With a CVSS score of 8.6, this authenticated RCE vulnerability allows a malicious actor with network access to execute arbitrary commands on affected systems. Given the active exploitation, organizations running PAN-OS are strongly advised to prioritize patching.
Vulnerability Details
- CVE-2026-0322 affects the PAN-OS management interface.
- It requires authentication but leads to full remote code execution.
- The flaw carries a high severity rating due to real-world exploitation.
- Multiple PAN-OS versions are impacted across different device types.
Recommended Actions
- Immediately update PAN-OS to the latest patched version.
- Review network logs for signs of unauthorized access or exploitation.
- Restrict access to the management interface from untrusted networks.
- Enable multi-factor authentication for administrative accounts.
Sources
Sources
Security email updates
One digest email when we publish new security articles (TL;DR plus links to read more). Unsubscribe anytime from the message footer. See our Privacy Policy.