CISA Warns of Palo Alto Networks PAN-OS Code Injection Vulnerability Exploited in Attacks
CISA added PAN-OS code injection flaw CVE-2026-0322 to the KEV catalog after real-world attacks; federal agencies must mitigate by October 17.
80
Product
Cloud NGFW
- Mentions · 7d0
- Mentions · 30d4
- All mentions7
- First seenSep 10, 2026
- Last mentioned14d ago
Timeline
7 articles · newest firstPalo Alto Warns of PAN-OS 0-day Flaw Actively Exploited in Attacks
Palo Alto says attackers are exploiting CVE-2026-0322, an authenticated PAN-OS management RCE that yields root.
84
CISA adds authenticated PAN-OS root RCE to KEV (CVE-2026-0322)
An authenticated attacker on the management network can run code as root on PA-Series, VM-Series, and Panorama; agencies must act by October 17.
76
Months-Old Palo Alto VPN Vulnerability Remains a Target for Ransomware Groups
Qilin and Settra are still exploiting Palo Alto CVE-2026-0257 to open unauthorized VPN sessions.
78
Palo Alto Networks security advisory (AV26-905)
Canada's Cyber Centre relayed Palo Alto Networks advisories covering PAN-OS, Cloud NGFW, Prisma Access, and Prisma Browser vulnerabilities, including PAN-OS CVE-2026-0310 buffer overflow.
20
Palo Alto PAN-OS Buffer Overflow Lets Attackers Execute Arbitrary Code as Root
Palo Alto Networks fixed CVE-2026-0310, a CVSS 9.2 unauthenticated PAN-OS buffer overflow enabling root code execution on PA-Series firewalls.
78
Palo Alto PAN-OS Vulnerability Enables Arbitrary Code Execution as Root User
Palo Alto Networks patched CVE-2026-0310, an unauthenticated XML-processing buffer overflow in PAN-OS allowing root code execution on PA-Series firewalls.
62
Related CVEs
by mentions- CVE-2026-03222%8.6Authenticated root RCE in Palo Alto PAN-OS management
- Buffer Overflow in PAN-OS XML Processing Enables Root RCE on PA-Series Firewalls
- CVE-2026-025795%7.8Authentication Bypass in Palo Alto Networks PAN-OS GlobalProtect Portal and Gateway
Appears with
- PAN-OSproduct · 7
- Prisma Accessproduct · 7
- Palo Alto Networksvendor · 7
- PA-Seriesproduct · 4
- VM-Seriesproduct · 4
- Palo Alto Networksorganization · 3
- Panoramaproduct · 3
- CISAorganization · 2
- Prisma Browserproduct · 1
- Unit 42organization · 1
- ReliaQuestorganization · 1
- Rapid7organization · 1
- Qilinthreat actor · 1
- Canadian Centre for Cyber Securityorganization · 1
- BloodHoundmalware · 1
- SharpHoundmalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.