Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
Summary
Palo Alto Networks has issued a warning about a critical zero-day vulnerability in their PAN-OS software, identified as CVE-2026-0322. This remote code execution (RCE) flaw is being actively exploited in attacks against their firewalls.
IFF Assessment
The exploitation of a critical zero-day vulnerability in widely used network infrastructure like firewalls poses a significant threat to defenders, enabling attackers to compromise systems.
Severity
This is a critical RCE vulnerability that can be exploited remotely, allowing an attacker to gain full control of the affected firewall without user interaction. The high exploitability and severe impact justify a high CVSS score.
CISA KEV: Listed as actively exploited. Federal patch due: October 17, 2026. Known ransomware use: Unknown.
Defender Context
This alert highlights the immediate need for organizations using Palo Alto Networks firewalls to apply the provided security updates. Defenders should prioritize patching this vulnerability and monitor their network for any signs of compromise, as active exploitation means attackers may already be present.