Palo Alto Networks patches PAN-OS zero-day exploited in firewall attacks
Palo Alto Networks has issued security updates for a high-severity PAN-OS zero-day vulnerability after detecting limited active exploitation against firewall management interfaces.
FTMQ Security, written by our newsroom0 views
Palo Alto Networks released security updates on Wednesday for a high-severity Remote Code Execution zero-day vulnerability in its PAN-OS software, BleepingComputer reported. The flaw, tracked as CVE-2026-0322, affects the PAN-OS management interface and is currently being exploited in targeted attacks. [1]
According to BleepingComputer, the vulnerability allows authenticated attackers with network access to execute arbitrary code with root privileges on vulnerable devices. Palo Alto Networks confirmed in a security advisory that it observed very limited exploitation targeting the management interface. [1]
Palo Alto Networks is an American multinational cybersecurity firm based in Santa Clara, California. Founded in 2005 by Nir Zuk, the enterprise provides advanced firewalls and security platforms to more than 70,000 organizations across more than 150 countries. [3][5]
Network administrators are advised to apply the official security updates provided by Palo Alto Networks to secure vulnerable management interfaces against potential exploitation. [1]
In short
- Palo Alto Networks released security updates for a high-severity zero-day vulnerability in PAN-OS tracked as CVE-2026-0322.
- The flaw allows authenticated attackers with network access to execute code as root via the management interface.
- Palo Alto Networks confirmed that limited active exploitation has been observed in the wild.
Sources
Every paragraph above points to the numbered items it rests on. Read the originals here.
- [1]Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacksBleepingComputer, 3h ago (the report this story comes from)
- [2]Palo Alto urges Korea firms to revamp cyber defense as AI speeds attacks - CHOSUNBIZChosunbiz, 17h ago
Background
- [3]Palo Alto Networks on Wikipedia
- [4]List of airline codes on Wikipedia
- [5]Palo Alto Networks on Grokipedia
Our newsroom writes these reports with the help of software, from the 5 sources listed and nothing else, and checks them against those sources. Facts can still be wrong or move on; the originals are the record. Spotted a mistake? Write to daniel@monsterkong.com.
Related from FTMQ Security
Earlier reports of ours on the same people and subjects.
- CISA adds four vulnerabilities to catalog as Microsoft patches record issuesThreat Intelligence, 2h ago
More in Top Stories
- Cisco Patches Zero Day Flaw in Secure Email Gateway2h ago
- Microsoft and Health ISAC seize domains powering massive Chinese phishing network2h ago
- Critical Ghostscript vulnerability allows remote code execution through malicious PDF files1d ago
- Meta suffers GitHub breach exposing corporate code and employee data1d ago
- Former OpenAI engineer arrested after covert listening device found in conference room1d ago
- Microsoft releases updates for more than 1400 security vulnerabilities1d ago
Get the day in one email
Reports like this one, the top news of the last 24 hours, every morning. Free, one email a day; readers can comment under every report.
By signing up you agree to our terms and privacy policy. Unsubscribe any time.
Comments
Loading
Join the conversation
Comments are open to readers of our daily email: the top news of the last 24 hours, every morning, free. Sign up and the comment box opens.
Already on the list? Enter the same address and we will send a sign-in link.
By signing up you agree to our terms and privacy policy. Unsubscribe any time.