Palo Alto Networks Warns of Actively Exploited PAN-OS RCE Vulnerability
Palo Alto Networks has released urgent patches for an actively exploited zero-day RCE flaw in PAN-OS, prompting CISA to add the vulnerability to its catalog.
Network security vendor Palo Alto Networks has issued an urgent security advisory and updates addressing a critical zero-day vulnerability being actively exploited in the wild. The vulnerability, tracked as CVE-2026-0322, resides within the management interface of the PAN-OS operating system.
Main Development
According to information released by Palo Alto Networks, the vulnerability allows an authenticated threat actor to achieve Remote Code Execution (RCE). Successful exploitation enables an attacker to gain full control over the targeted firewall appliance.
Key Details and Impacted Products
The vulnerability poses a severe risk to organizations utilizing various Palo Alto Networks platforms, notably:
- PA-Series hardware firewalls
- VM-Series virtual firewalls
- Panorama centralized management appliances
Given reports of active exploitation in attacks, the Cybersecurity and Infrastructure Security Agency (CISA) has promptly added CVE-2026-0322 to its Known Exploited Vulnerabilities catalog, urging administrators to take immediate remediation measures.
Why This Matters
Firewalls serve as the critical first line of defense for both enterprise and government networks. The active exploitation of such core perimeter devices creates an open doorway for hackers to breach organizational boundaries and penetrate deep into internal network environments.
What to Watch Next
Network administrators, cybersecurity engineers, and IT leaders managing affected deployments should prioritize applying the available security updates immediately. Organizations are advised to restrict exposure of management interfaces and monitor network traffic for any indicators of compromise related to this flaw.
Source: BleepingComputer
