CVE-2026-0322 Palo Alto Networks Cloud NGFW
A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by…
- CVSS
- 8.6 High
- EPSS
- 2.1%
- Percentile
- 82
- Published
- 2026-10-14
- Force
- 10 of 12
- Public PoC
- 1
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:N/R:U/V:D/RE:M/U:Red
On CISA’s exploited list
Palo Alto Networks PAN-OS Code Injection Vulnerability
- Added
- 2026-10-14
- Federal patch deadline
- 2026-10-17
- Ransomware use
- not known