GoKawiilPalo Alto Networks patches actively exploited PAN-OS zero-day CVE-2026-0322
Palo Alto Networks disclosed a high-severity PAN-OS flaw, rated 8.6, that lets authenticated attackers with management-interface access execute code as root. The company said it observed limited exploitation in the wild and has released patches for PAN-OS 10.2, 11.1, 11.2, 12.1 and 12.2, with a fix for 11.2.16 due October 15. The flaw affects PA-Series and VM-Series firewalls and Panorama appliances, but not Cloud NGFW or Prisma Access.
GoKawiil's interpretation of the reporting above, not reported fact.
Because exploitation requires existing credentials and network access to the management interface, the real-world risk may hinge on how many organizations have exposed that interface externally rather than restricting it internally, as Palo Alto now recommends. The lack of a workaround and only partial Threat Prevention coverage suggests unpatched systems could remain vulnerable to variant attacks even after mitigation steps are applied. The incident also underscores how management interfaces on security appliances remain attractive targets for attackers seeking root-level access.
- CVE-2026-0322 is a high-severity (8.6) PAN-OS flaw enabling root code execution via the management interface.
- Palo Alto Networks has confirmed limited active exploitation and released patches for several PAN-OS versions, with one fix still pending.
- No workaround exists; the company urges restricting management-interface access and upgrading promptly, since Threat Prevention coverage is only partial.
Yubico YubiKey 5C NFC Security Key — Since this flaw requires attacker-obtained credentials to exploit, strengthening login security with hardware-based multi-factor authentication is a smart defense-in-depth move for admins managing firewalls and network appliances. A YubiKey adds a physical authentication layer that's much harder for attackers to compromise than passwords alone.”,
See Yubico YubiKey 5C NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-10-14
Published there as: “Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.