Palo Alto Networks Discloses PAN-OS Flaw CVE-2026-0322
A root-privilege remote code execution bug in the PAN-OS management interface rates CVSS 8.6, and Palo Alto Networks says it saw very limited exploitation.
Palo Alto Networks disclosed a remote code execution vulnerability tracked as CVE-2026-0322 in the PAN-OS management interface on October 14. The company assigned the flaw a CVSS 4.0 score of 8.6, rated High, and placed it at the highest urgency for response, according to the security outlet dailysecu.com.
The company said it observed very limited exploitation targeting the management interface. Exploitation requires network access to that interface and high-privileged authentication; an attacker who meets both conditions can execute code with root privileges on the firewall.
Affected products are PA-series and VM-series firewalls and the PAN-OS of the Panorama management system. Cloud NGFW and Prisma Access are not affected.
Fixed versions are provided for the PAN-OS 10.2, 11.1, 11.2, 12.1 and 12.2 branches. PAN-OS 11.2.16 is listed in the advisory as scheduled for October 15, so actual distribution still needs to be confirmed.
Quick answers
Which products are affected by CVE-2026-0322?
PA-series and VM-series firewalls and the PAN-OS of the Panorama management system. Cloud NGFW and Prisma Access are not affected.
Is there a fix for CVE-2026-0322?
Fixed versions are provided for the PAN-OS 10.2, 11.1, 11.2, 12.1 and 12.2 branches. PAN-OS 11.2.16 is listed as scheduled for October 15, so actual distribution needs to be confirmed.
What is the severity of the flaw?
It carries a CVSS 4.0 score of 8.6, rated High, with the highest urgency for response.