palo_alto_networks CVE-2026-0322: PAN-OS: Authenticated Remote... | Tenable®

Back Tenable

palo_alto_networks CVE-2026-0322: PAN-OS: Authenticated Remote... | Tenable®

Tenable • October 14, 2026

Share: View original

palo_alto_networks CVE-2026-0322: PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface (None)

palo_alto_networks CVE-2026-0322: PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface (None)

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Palo Alto Networks PAN-OS RCE Vulnerability CVE-2026-0322 Palo Alto Networks disclosed a remote code execution (RCE) vulnerability, CVE-2026-0322, affecting the management interface of PAN-OS software. This flaw allows authenticated attackers with network access to execute arbitrary code with root privileges on affected firewalls. The vulnerability has a CVSS score of 8.6 and is actively being exploited in the wild, prompting CISA to add it to the Known Exploited Vulnerabilities catalog. Affected systems include PA-Series and VM-Series firewalls and Panorama appliances, while Cloud NGFW and Prisma Access are not impacted. Users are advised to restrict access to the management interface and apply patches immediately. The vulnerability was disclosed on October 14, 2026, and has been observed with limited exploitation attempts. Palo Alto Networks has released fixes for various PAN-OS versions, with additional updates expected soon. 30 sources 72

Extracted Entities

CVEs (1)

Platforms (1)