Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks

CVE v události 1

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 8.6.

Jak se o tom psalo 7

1. 15. 10. 2026 09:52 · CSIRT Itálie (ACN) IT

   Palo Alto Networks: rilevato sfruttamento in rete della CVE-2026-0322 relativa a PAN-OS

   Palo Alto Networks ha rilasciato aggiornamenti di sicurezza per sanare molteplici vulnerabilità, di cui una con gravità “alta” relativa a PAN-OS per la quale è stato rilevato lo sfruttamento attivo in rete.

2. 15. 10. 2026 · zachyceno 04:00 · NCSC-FI FI

   PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface

   Classification: Severe, Solution: Official Fix, Exploit Maturity: Functional, CVSSv3.1: 8.6, CVEs: CVE-2026-0322, Summary: A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses…

3. 15. 10. 2026 · zachyceno 17:00 · CERT-FR – avis FR

   Multiples vulnérabilités dans les produits Palo Alto Networks (15 octobre 2026)

   De multiples vulnérabilités ont été découvertes dans les produits Palo Alto Networks. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance. Palo Alto Networks indique que la...

4. 15. 10. 2026 00:56 · BleepingComputer US nadpis události

   Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks

   Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls. [...]

5. 14. 10. 2026 21:08 · Cyber Centre Kanada CA

   Palo Alto Networks security advisory (AV26-1041)

   Serial number: AV26-1041 Date: October 14, 2026 As of October 14, 2026, Palo Alto Networks is affected by vulnerabilities in the following products: PAN-OS 12.2 Prior to 12.2.4 PAN-OS 12.1 Prior to 12.1.4-h12 Prior to 12.1.7-h8 Prior to 12.1.10-h2 PAN-OS 11.2 Prior to 11.2.4-h22 Prior to 11.2.7-h21 Prior to 11.2.10-h15 Prior to 11.2.13-h3 PAN-OS 11.1 Multiple versions PAN-OS 10.2 Multiple versions Prisma Browser Prior to 152.8.5.83 The Cyber Centre encourages users and administrators to review…

6. 14. 10. 2026 18:00 · Palo Alto PSIRT US

   CVE-2026-0322 PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface (Severity: HIGH)

7. 14. 10. 2026 · zachyceno 22:00 · CISA KEV US

   Palo Alto Networks PAN-OS Code Injection Vulnerability (CVE-2026-0322)

   CISA added CVE-2026-0322 to the Known Exploited Vulnerabilities catalog. Affected product: Palo Alto Networks PAN-OS. Remediation due date: 2026-10-17.