CVE-2026-0322(paloaltonetworks / pan-os)

Palo Alto Networks says attackers are exploiting a new flaw that lets them run code as root on its firewalls. CVE-2026-0322 needs a login to the PAN-OS management interface. Palo Alto says exploitation is "very limited". Patches are available. https://t.co/nMijcR58JB

🚨 Palo Alto Networks patches actively exploited PAN-OS RCE flaw (CVE-2026-0322). Authenticated attackers with network access to the management interface can run code as root. Palo Alto reports "very limited" exploitation. CISA added it to KEV. Read - https://thehackernews.com/2026/10/palo-alto-networks-patches-pan-os.html

보안장비들의 RCE 취약점이 계속 나오고 있습니다. 관련 장비 쓰는 회사는 보안 패치와 모니터링 강화 필요! 팔로알토네트웍스는 방화벽을 대상으로 하는 공격에 악용된 심각도 높은 PAN-OS 원격 코드 실행(RCE) 제로데이 취약점(CVE-2026-0322)에 대한 보안 업데이트를 발표했습니다. 이 취약점은 PAN-OS 관리 인터페이스에 영향을 미치며, 네트워크 접근 권한이 있는 인증된 공격자가 취약한 장치에서 루트 권한으로 코드를 실행할 수 있도록 합니다. https://www.bleepingcomputer.com/news/security/palo-alto-networks-warns-of-pan-os-rce-flaw-exploited-in-attacks/

🚨 PALO ALTO NETWORKS CONFIRMS LIMITED EXPLOITATION OF PAN-OS MANAGEMENT RCE (CVE-2026-0322, CVSS 8.6) Palo Alto Networks published an advisory on Oct 14, 2026 for CVE-2026-0322, an authenticated remote code execution flaw in the PAN-OS management interface. The vendor says very limited exploitation has been observed targeting the management interface. What the advisory says: • An authenticated attacker with network access to the management interface can run code as root on the firewall • Privileges Required: HIGH (not unauthenticated) • Affects PA-Series and VM-Series firewalls and Panorama (virtual and M-Series) • Cloud NGFW and Prisma Access are not impacted • CVSS 4.0: 8.6 · Urgency: HIGHEST · Exploit Maturity: ATTACKED • No known workarounds; restrict management access to trusted systems (jump box) Fixes: apply the branch-specific hotfix / upgrade from the advisory release matrix. PAN-OS 11.2.16 is listed with an October 15 ETA; other fixed builds are available now for applicable 12.2 / 12.1 / 11.2 / 11.1 / 10.2 branches. Threat Prevention IDs 510046 and 510047 (content 9159-10287+) provide limited coverage only when management traffic is decrypted and inspected — they do not replace upgrading. ⚠️ Analyst Note: Authentication and high privileges are required. Neither widespread exploitation nor exploitation before patch availability is established. Independent telemetry, actor attribution and victim counts were not found. The vendor shared three IPs associated with limited exploit attempts; treat those as unconfirmed IoCs until you validate them in your own telemetry. Source: https://security.paloaltonetworks.com/CVE-2026-0322 #DDW #PANOS #Vulnerability #Firewall #CyberSecurity

Source: https://security.paloaltonetworks.com/CVE-2026-0322

Palo Alto Networks patched the PAN-OS CVE-2026-0322 zero-day vulnerability exploited in limited attacks to achieve root code execution on firewalls. #PaloAltoNetworks #PANOS #CVE20260322 #ZeroDay #Cybersecurity https://meterpreter.org/pan-os-cve-2026-0322-zero-day/

Anyone with one admin password for a Palo Alto firewall and a way to reach its admin page can take over the box as root. Already exploited. CISA gave agencies three days. PAN-OS hotfixes are out. Lock the admin page to inside IPs tonight. https://hol.org/blog/cve-2026-0322-pan-os-management-interface-rce-kev https://t.co/1q8qrwCssN

Palo Alto Networks advirtió que una vulnerabilidad RCE zero-day en PAN-OS (CVE-2026-0322) ya está siendo explotada en ataques reales contra firewalls. Si en tu empresa mexicana usan firewalls de Palo Alto, este aviso te toca de cerca. Es uno de los vendors más comunes en PyMEs y dependencias del gobierno. Lo preocupante es que el parche salió después de que los atacantes ya lo estaban usando. No es teórico, está en la calle. Actualiza tus dispositivos PAN-OS ya, sin esperar al próximo mantenimiento. https://www.bleepingcomputer.com/news/security/palo-alto-networks-warns-of-pan-os-rce-flaw-exploited-in-attacks/

🚨 Palo Alto Networks PAN-OS CVE-2026-0322 is now KEV-listed. An authenticated attacker with network access to the management interface can execute code as root on affected firewalls. CVSS 8.6. ExploitGrid 95 Critical. No public exploit documented. 🔎 https://exploitgrid.net

CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products - https://www.helpnetsecurity.com/2026/10/15/cve-2026-0322-cve-2026-76519-cve-2026-105133-cve-2026-105134-exploted/ - @CISAgov @HuntressLabs - #CISA #Vulnerabilities #PaloAltoNetworks #Cisco #Ahsay #CVE #Cybersecurity #CyberSecurityNews #SecurityNews

Palo Alto Networks「PAN-OS」にroot権限でコード実行される脆弱性、サイバー攻撃で悪用確認―CVE-2026-0322 https://rocket-boys.co.jp/security-measures-lab/palo-alto-pan-os-cve-2026-0322-rce-exploited/ #セキュリティ対策Lab #security #securitynews #セキュリティ #セキュリティニュース

PAN-OS CVE-2026-0322 gives root through the management interface, and it is being exploited. The catch: it needs admin credentials. Patch it, then fix the real control: phishing-resistant MFA for firewall admins and no management plane on untrusted networks. https://t.co/COMvGykbL0

🚨 PAN-OS CVE-2026-0322 is KEV-listed. Authenticated attackers with network access to the management interface can execute code as root on affected firewalls. CVSS 8.6. ExploitGrid 95 Critical. No public exploit documented. 🔎 https://exploitgrid.net

🚨 CISA KEV suma 4 fallas explotadas: PAN-OS CVE-2026-0322, Cisco Secure Email Gateway CVE-2026-76519 (CVSS 9.8) y AhsayCBS CVE-2026-105133/105134. Plazo federal: 17 oct. Parchea ya y saca la gestión de internet. https://nesshq.com #CISA #Ciberseguridad https://t.co/bdvuxW56fR

CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products www.​helpnetsecurity.​com/2026/10/15/cve-2026-0322-cve-2026-76519-cve-2026-105133-cve-2026-105134-exploted/ https://t.co/hyQVnDGMcg

🚨 CyberRakshakLabs (https://cyberrakshaklabs.in/) — Incident Summary , 🚨 Palo Alto Networks has disclosed CVE-2026-0322 #PaloAltoNetworks #PANOS #CVE20260322 #ZeroDay #ZeroDayVulnerability #RemoteCodeExecution #RCE #CyberSecurity #FirewallSecurity #NetworkSecurity https://t.co/pQuYPXycTu

🚨 CyberRakshakLabs (https://cyberrakshaklabs.in/) — Incident Summary , 🚨 Palo Alto Networks has disclosed CVE-2026-0322 #PaloAltoNetworks #PANOS #CVE20260322 #ZeroDay #ZeroDayVulnerability #RemoteCodeExecution #RCE #CyberSecurity #FirewallSecurity #NetworkSecurity https://t.co/MOaprYnLNX

CISA added four actively exploited bugs to its KEV catalog, including CVE-2026-76519 affecting Cisco Secure Email Gateway and CVE-2026-0322 affecting Palo Alto Networks PAN-OS. Organizations are urged to apply emergency mitigations.

Warning: #ActivelyExploited remote code execution in Palo Alto #PAN-OS. #CVE-2026-0322 CVSS: 8.6. An authenticated attacker can execute arbitrary code as root, #RCE! See our advisory for more info: https://ccb.belgium.be/advisories/warning-actively-exploited-remote-code-execution-vulnerability-pan-os-patch-immediately #Patch #Patch #Patch

CISA wants Palo Alto firewalls patched by Friday. Attackers already get root. CVE-2026-0322: an authenticated admin on the management interface can run code as root. Limited exploitation. No workaround. Keep management off the open internet. https://security.paloaltonetworks.com/CVE-2026-0322