- High 8.6
- Known exploited (CISA KEV)
CVE-2026-0322
A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS…
Scores
The facts
- Published
- 14 October 2026
- Last changed
- 15 October 2026
- NVD status
- Analyzed
- Severity
- High, CVSS 8.6 out of 10 (version 4.0)
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R… - Weakness
- Affects
- paloaltonetworks pan-os
- Known exploited
- Yes. CISA added it to the Known Exploited Vulnerabilities catalogue on 14 October 2026.
- EPSS
- 1.2% chance of exploitation activity in the next 30 days (percentile 68).
Is there a Securelyn advisory?
Not yet. Securelyn writes plain-English advisories for the flaws that matter most to businesses. Subscribe to the digest to hear about them.