Palo Alto Networks PAN-OS RCE Zero-Day Exploited in Real-World Attacks
CVE-2026-0322 affects PAN-OS firewalls; updates released
Key Takeaways
- Palo Alto Networks has released updates for CVE-2026-0322, a high-severity PAN-OS RCE zero-day.
- The vulnerability is being exploited in real-world attacks targeting firewall devices.
- Successful exploitation could allow remote code execution and full compromise of firewall infrastructure.
- Administrators should apply the latest PAN-OS software versions immediately to mitigate the risk.
Quick answers
- What happened?
- Palo Alto Networks has released security updates to address a high-severity remote code execution vulnerability in PAN-OS, tracked as CVE-2026-0322. The flaw has been exploited in attacks targeting firewall devices. The company has urged administrators to apply the latest software versions to mitigate the risk of compromise.
- Which products are affected?
- PAN-OS
- What should defenders do?
- Palo Alto Networks has released security updates to address CVE-2026-0322. Affected organizations should apply the latest PAN-OS software versions to mitigate the risk. Immediate patching is recommended for all PAN-OS deployments.
- Which vulnerabilities are involved?
- CVE-2026-0322
Palo Alto Networks has released security updates for a high-severity PAN-OS remote code execution zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls. The vulnerability affects PAN-OS, the operating system deployed on the vendor's firewall products. Successful exploitation could allow remote attackers to execute arbitrary code on affected devices, potentially leading to full compromise of firewall infrastructure. Palo Alto Networks has not disclosed detailed technical specifications of the exploit chain, but confirmed that attacks are occurring in the wild. The company has released patches and recommends that all administrators update to the latest PAN-OS software versions as soon as possible. The CVE identifier has been assigned and the severity is rated high. Organizations using PAN-OS should prioritize patching to protect their network perimeter.
Security Details
CVE-2026-0322 is a high-severity remote code execution vulnerability in PAN-OS. The flaw has been exploited in attacks targeting firewall devices. Successful exploitation could allow remote attackers to execute arbitrary code on affected PAN-OS devices, potentially leading to full compromise of firewall infrastructure. Specific exploit methodology details are not disclosed in the source summary.
Affected products
PAN-OS
Mitigation
Palo Alto Networks has released security updates to address CVE-2026-0322. Affected organizations should apply the latest PAN-OS software versions to mitigate the risk. Immediate patching is recommended for all PAN-OS deployments.
Sources
BleepingComputer
Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
Oct 14, 2026 · 22:56
Original link
Related Security News
Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access
Security researchers at Volexity disclosed on October 13, 2026, that a threat actor chained three zero-day vulnerabilities in Ivanti Connect Secure VPN appliances to achieve unauthenticated remote code execution as root. Ivanti has released fixes for two of the flaws; a fix for the third vulnerability remains pending. Customers are urged to apply available patches immediately.
