Palo Alto Networks patches exploited PAN-OS flaw CVE-2026-0322 as CISA lists it
Palo Alto Networks issued security updates for CVE-2026-0322, a high-severity remote code execution flaw in the PAN-OS management interface, with a CVSS score of 8.6. The company says it knows of limited exploitation against customer firewalls, according to SecurityWeek. CISA added the flaw to its Known Exploited Vulnerabilities catalog after confirming real-world attacks.
- The flaw could let an authenticated attacker run code with root-level access, per Cyber Security News.
- Palo Alto Networks has made indicators of compromise available, according to SecurityWeek.
- CISA also listed Ahsay AhsayCBS and Cisco Secure Email Gateway flaws, per Security Affairs.
Covered by 3 publishers within 19 hours of the first report.
Reporting3
The Hacker News Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation · info@thehackernews.com (The Hacker News)
Security Affairs U.S. CISA adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited Vulnerabilities catalog · Pierluigi Paganini
Cyber Security News CISA Warns of Palo Alto Networks PAN-OS Code Injection Vulnerability Exploited in Attacks · Abinaya