Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation
Palo Alto flaw lets logged-in attackers run code.
The flaw is a remote code execution vulnerability in the PAN-OS management interface, tracked as CVE-2026-0322, with a CVSS score of 8.6, and attackers are actively exploiting it. Users should apply the PAN-OS security update for CVE-2026-0322.
Sources
Story so far
- Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks – BleepingComputer
first report, exploited in attacks - Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation – The Hacker News
patch / fix released - Attackers exploit Palo Alto PAN-OS flaw for root access as CISA orders three-day fix – CSO Online
added to CISA KEV - CVE-2026-0317 PAN-OS: Denial of Service Vulnerability (Severity: LOW) – Palo Alto Networks PSIRT
new CVE: CVE-2026-0317 - CVE-2026-0321 PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services (Severity: MEDIUM) – Palo Alto Networks PSIRT
new CVE: CVE-2026-0321 - CVE-2026-0320 PAN-OS: Authenticated Admin Command Injection Vulnerability (Severity: MEDIUM) – Palo Alto Networks PSIRT
new CVE: CVE-2026-0320 - CVE-2026-0322 PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface (Severity: HIGH) – Palo Alto Networks PSIRT
- U.S. CISA adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited Vulnerabilities catalog – Security Affairs
- U.S. CISA adds Atlassian flaw to its Known Exploited Vulnerabilities catalog – Security Affairs
new CVE: CVE-2026-21589 - Here’s What Telegram Giving Data to the U.S. Government Looks Like – 404 Media
Fact-checked against the sources above before publishing. AI-assisted script, synthetic voice, human-approved. Found an error? Tell us.
