CVE-2026-0322

Published Oct 14, 2026

Last updated 6 days ago

Exploit knownCVSS high 8.6
PAN-OS
Panorama
PA-Series

Overview

Description
A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma® Access are not impacted by this vulnerability.
Source
psirt@paloaltonetworks.com
NVD status
Analyzed
Products
pan-os

Risk scores

CVSS 4.0

Type
Secondary
Base score
8.6
Impact score
-
Exploitability score
-
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Red
Severity
HIGH

CVSS 3.1

Type
Primary
Base score
7.2
Impact score
5.9
Exploitability score
1.2
Vector string
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Severity
HIGH

Known exploits

Data from CISA

Vulnerability name
Palo Alto Networks PAN-OS Code Injection Vulnerability
Exploit added on
Oct 14, 2026
Exploit action due
Oct 17, 2026
Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Weaknesses

psirt@paloaltonetworks.com
CWE-94

Social media

Hype score
Not currently trending
  1. 🐦 🚨 BeyondTrust Remote Support auth-bypass (CVE-2026-102764) was exploited as a 0day by a Chinese APT — now on CISA KEV. Palo Alto PAN-OS (CVE-2026-0322, CVSS 8.6) also added. ConnectWise supply-chain breach hit Microsoft 365 tenants. Patch now. #infosec #CVE #KEV

    @ita_ipo

    19 Oct 2026

    52 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  2. 🐦 🚨 Cisco Secure Email Gateway CVE-2026-76519 (CVSS 9.8) actively exploited — unauthenticated root RCE, no workaround. Also exploited in the wild: Palo Alto PAN-OS CVE-2026-0322 and BeyondTrust CVE-2026-102764 (Chinese APT since Aug). #infosec #CVE #0day

    @ita_ipo

    18 Oct 2026

    76 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  3. CVE-2026-0322 in Palo Alto Networks PAN-OS is confirmed exploited, despite a low EPSS. An authenticated attacker can achieve RCE with root privileges. Restrict management interface access to trusted IPs immediately. #PaloAlto #RCE #ThreatIntel

    @BytesNora

    18 Oct 2026

    2 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  4. 🔒 #CyberSecurity CVE-2026-0322: Palo Alto PAN-OS Management Interface Code Execution — Detection… "On Wednesday, Palo Alto Networks released emergency security updates for CVE-2026-0322 (CVSS…" 🔗 https://t.co/fYgUj6ttvH #CyberSecurity #ThreatIntel #critical #zerod

    @SecurityAr58409

    17 Oct 2026

    55 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  5. 🚨 CISA KEV suma 4 fallas explotadas: PAN-OS CVE-2026-0322, Cisco Secure Email Gateway CVE-2026-76519 (CVSS 9.8) y AhsayCBS CVE-2026-105133/105134. Plazo federal: 17 oct. Parchea ya y saca la gestión de internet. https://t.co/z8GyI612pF #CISA #Ciberseguridad https://t.co/bdvux

    @nesshq_co

    15 Oct 2026

    44 Impressions

    1 Retweet

    1 Like

    0 Bookmarks

    1 Reply

    0 Quotes

  6. CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products www.​helpnetsecurity.​com/2026/10/15/cve-2026-0322-cve-2026-76519-cve-2026-105133-cve-2026-105134-exploted/ https://t.co/hyQVnDGMcg

    @TheCyberSecHub

    15 Oct 2026

    1050 Impressions

    0 Retweets

    2 Likes

    0 Bookmarks

    1 Reply

    0 Quotes

  7. Patch Now | Oct 15 Ivanti Connect Secure (CVE-2026-104935): zero-day, root access, runs in memory, Integrity Checker won't catch it. Cisco Secure Email Gateway (CVE-2026-76519): no login needed. Palo Alto PAN-OS (CVE-2026-0322): root RCE, patch now. https://t.co/4WcfEclJUJ

    @CERT_UG

    15 Oct 2026

    131 Impressions

    0 Retweets

    2 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  8. CVE-2026-0322 — Palo Alto Networks PAN-OS Code Injection Vulnerability https://t.co/tTbX61Owt3

    @Npj8448

    15 Oct 2026

    6 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  9. 🔒 #CyberSecurity CISA KEV Alert: CVE-2026-0322 PAN-OS, CVE-2026-76519 Cisco SEG, and AhsayCBS Vu… "On October 14, 2026, CISA added four vulnerabilities to its Known Exploited Vulnerabilities…" 🔗 https://t.co/vmMyJTwjsb #CyberSecurity #ThreatIntel #critical #zeroday

    @SecurityAr58409

    15 Oct 2026

    51 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  10. 🔒 #CyberSecurity CVE-2026-0322: Palo Alto Networks PAN-OS Code Injection Added to CISA KEV — Det… "On October 14, 2026, CISA added CVE-2026-0322 to its Known Exploited Vulnerabilities…" 🔗 https://t.co/nuS3lgRvS7 #CyberSecurity #ThreatIntel #cve20260322 #critical #

    @SecurityAr58409

    15 Oct 2026

    33 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  11. 【CISA KEV速報】2026-10-14付けで4件追加 ・CVE-2026-105134 AhsayCBS ・CVE-2026-105133 AhsayCBS ・CVE-2026-76519 Cisco Secure Email Gateway ・CVE-2026-0322 Palo Alto Networks PAN-OS いずれも悪用確認済み。概要と対応期限はこちら https://t.co/QrGFG

    @sec_news_com

    15 Oct 2026

    77 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  12. 米国サイバーセキュリティ・社会基盤安全保障庁(CISA)が既知の悪用された脆弱性に4件の脆弱性を追加。PAN-OSのCVE-2026-0322、Cisco SEGのCVE-2026-76519、AhsayCBSのCVE-2026-105133とCVE-2026-105134。対処期限は3日後の10/17。ラン

    @__kokumoto

    14 Oct 2026

    382 Impressions

    0 Retweets

    1 Like

    1 Bookmark

    0 Replies

    0 Quotes

Configurations