CVE-2026-0322: Palo Alto Networks PAN-OS Code Injection Vulnerability
Summary
Palo Alto Networks PAN-OS has a code injection vulnerability (CVE-2026-0322) allowing authenticated attackers with network access to execute arbitrary code with root privileges on firewalls. Organizations must apply vendor-provided mitigations and comply with CISA's guidance on prioritizing security updates.
IFF Assessment
This vulnerability allows an attacker to gain root privileges and execute arbitrary code, posing a significant threat to the integrity and confidentiality of network devices.
Severity
The vulnerability allows for code injection with root privileges, implying a high attack vector (network), high impact (confidentiality, integrity, availability), and high exploitability.
CISA KEV: Listed as actively exploited. Federal patch due: October 17, 2026. Known ransomware use: Unknown.
Defender Context
This vulnerability in PAN-OS is critical as it allows for root-level code execution, enabling attackers to compromise firewall integrity. Defenders must prioritize applying vendor-specific mitigations and adhere to CISA directives for timely patching to prevent potential ransomware or other malicious activities.