Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks

A critical zero-day vulnerability (CVE-2026-0322) in Palo Alto Networks PAN-OS allowed authenticated attackers with network access to the management interface to execute arbitrary code as root, effectively compromising the firewall itself. The fact that this flaw resides in the management interface highlights a common misconfiguration risk: exposing administrative surfaces to broad or untrusted networks. Active exploitation before a patch was widely applied underscores the danger of delayed remediation cycles for network security appliances. CISA's addition to the Known Exploited Vulnerabilities catalog signals that threat actors are actively weaponizing this flaw, raising the stakes for any organization running affected versions. When a firewall is compromised, all traffic flowing through it — and the trust model it enforces — must be considered suspect.