Uzha
Sign in
← Today's brief

Security · Updated 15 Oct, 11:47 am IST

Palo Alto patches PAN-OS RCE zero-day CVE-2026-0322 under active exploitation

Image: BleepingComputer

Why it matters for readers: It's an example of how attackers can abuse admin access to take over devices and why updates matter.

  • The vulnerability is an authenticated remote code execution bug in the PAN-OS management interface with a CVSS score of 8.6.12
  • Palo Alto has observed limited/active exploitation and has published security updates for affected PAN-OS releases.12
  • Affected products include PA-Series and VM-Series firewalls, Panorama virtual and M-Series appliances; Cloud NGFW and Prisma Access are not affected.1
  • Exploitation requires existing credentials and network access to the management interface, so Palo Alto recommends restricting management access to trusted internal IPs.1
  • Fixes were released for PAN-OS 10.2, 11.1, 11.2, 12.1 and 12.2, with an 11.2.16 fix expected on October 15; older unsupported versions must be upgraded.1
SaveAsk about this story
Report a mistake in this summary

Get a brief like this every morning

Uzha reads hundreds of sources and gives you the stories that matter for your work, with every source linked. Free.

Get started

How this story developed

  1. 15 Oct, 04:26 am · BleepingComputer

    Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks

  2. 15 Oct, 11:47 am · The Hacker News

    Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation