CVE-2026-0322
7.2HighPublished 14 Oct 2026 · NVD status: Analyzed · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-94
Impact
Authenticated attackers with network access to the management interface can execute arbitrary code with root privileges on the device. They need high-privilege credentials and network reachability to the PAN-OS management interface.
Root cause
Improper code generation or injection (CWE-94) in the management interface allows command execution.
Affected systems
Palo Alto Networks PAN-OS software on PA-Series, VM-Series, and Panorama (M-Series and virtual); specific versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Upgrade to the patched PAN-OS release specified in the vendor advisory once available. If patching must wait, restrict network access to the management interface strictly to trusted internal IP addresses.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma® Access are not impacted by this vulnerability.
References
- https://security.paloaltonetworks.com/CVE-2026-0322Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-0322US Government Resource