CyberSecurity News

Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation

The Hacker News

· October 15, 2026

AI summary

Palo Alto Networks has released security updates to address a high-severity vulnerability in PAN-OS software that is being actively exploited. The flaw is a remote code execution issue in the management interface, allowing for malicious code to be executed. This vulnerability has a CVSS score of 8.6 and is identified as CVE-2026-0322. It requires authentication to exploit, but still poses a significant threat due to its potential for remote code execution. The company's update aims to patch this flaw and prevent further exploitation. The active exploitation of this vulnerability highlights the importance of applying the security update.

Vulnerabilities mentioned

CVE-2026-0322

UNKNOWN

CISA KEV

A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma® Access are not impacted by this vulnerability.

Read the full article at The Hacker Newsthehackernews.com/2026/10/palo-alto-networks-patches-pan-os.html

This is an AI-generated brief aggregated by HackerFeeds for convenience and grounded in the source’s own summary; the related CVE, threat-group and country data is from HackerFeeds’ own indexes. The original article is the authoritative source — all rights belong to The Hacker News.