Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution

A critical zero-day vulnerability (CVE-2026-0322) in Palo Alto Networks' PAN-OS allowed authenticated attackers to execute arbitrary code with root privileges on firewall appliances — the very devices meant to protect network perimeters. The fact that active exploitation was observed before a patch was widely applied underscores the danger of delayed remediation on internet-facing security infrastructure. CISA's inclusion in the Known Exploited Vulnerabilities catalog signals this is not a theoretical risk but an active threat requiring urgent action. Organizations that treat security appliances as 'set and forget' devices are especially vulnerable, as these systems require the same rigorous patch discipline as any other critical asset.