PANW · News · 20261015N

Security Product Vulnerabilities

Palo Alto Networks Inc · 2026-10-15 · Importance 47 · Surprise 60 · In source text

Palo Alto Networks released hotfixes for CVE-2026-0322, a high-severity PAN-OS zero-day affecting PA-Series, VM-Series, and Panorama products. The vulnerability enables remote code execution or root access and was reportedly exploited by authenticated attackers. CISA added the flaw to its Known Exploited Vulnerabilities catalog, increasing urgency for affected federal agencies and enterprise customers to patch and investigate systems.

Key facts

• Palo Alto Networks released patches for a high-severity PAN-OS zero-day vulnerability CVE-2026-0322 that allows remote code execution on its firewalls. source
• Palo Alto Networks released hotfixes for various PAN-OS versions for CVE-2026-0322 and emphasized restricting management interface access and verifying for compromise. source
• The CVE-2026-0322 PAN-OS flaw has seen limited exploitation by authenticated attackers. source
• Attackers are exploiting CVE-2026-0322 in PAN-OS to gain root access. source
• The CVE-2026-0322 PAN-OS flaw affects PA-Series, VM-Series, and Panorama. source

Impact estimates