Cve 2026 0322

Palo Alto Networks patches actively exploited PAN-OS zero-day CVE-2026-0322

Palo Alto Networks disclosed a high-severity PAN-OS flaw, rated 8.6, that lets authenticated attackers with management-interface access execute code as root. The company said it observed limited exploitation in the wild and has released patches for PAN-OS 10.2, 11.1, 11.2, 12.1 and 12.2, with a fix for 11.2.16 due October 15. The flaw affects PA-Series and VM-Series firewalls and Panorama appliances, but not Cloud NGFW or Prisma Access.