[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fOlh6NCETMJ7kTgO8N5agEqmf6POOvuWzkRl-DcJJWIE":3},{"article":4,"iocs":42,"watch_terms":50,"solutions":51,"lesson":142},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":29,"category":30,"article_tags":34},"ea498053-4a10-4bce-ab19-1b6007e279b2","Palo Alto PAN-OS RCE Flaw Allows Attackers to Execute Arbitrary Code With Root Privileges","palo-alto-pan-os-rce-flaw-allows-attackers-to-execute-arbitrary-code-with-root-p-c11f8e","Palo Alto Networks has disclosed a remote code execution vulnerability in PAN-OS software running on Panorama. Tracked as CVE-2026-0330, the flaw allows an authenticated administrator with network access to execute arbitrary code with root privileges. The November 11, 2026, advisory urges users to patch affected Panorama deployments, while Cloud NGFW, Prisma Access, and standalone PAN-OS […] The post Palo Alto PAN-OS RCE Flaw Allows Attackers to Execute Arbitrary Code With Root Privileges appeared first on Cyber Security News.","Palo Alto Networks disclosed a remote code execution vulnerability (CVE-2026-0330) in PAN-OS software running on Panorama. The flaw allows an authenticated administrator with network access to execute arbitrary code with root privileges. Palo Alto Networks is not aware of malicious exploitation and has released patches for affected Panorama deployments.","Palo Alto PAN-OS RCE flaw allows arbitrary code execution with root privileges.","https:\u002F\u002Fcybersecuritynews.com\u002Fpalo-alto-networks-pan-os-rce-vulnerability\u002F","https:\u002F\u002Fcybersecuritynews.com\u002Fwp-content\u002Fuploads\u002F2026\u002F11\u002FPalo-Alto-Networks-PAN-OS-RCE-Vulnerability-Allow-Attackers-to-execute-arbitrary-code-with-root-privileges.webp","2026-11-12T08:09:33+00:00","2026-11-12T09:00:25.137391+00:00",8,[17,20,23,25,27],{"name":18,"type":19},"PAN-OS","product",{"name":21,"type":22},"Palo Alto Networks","vendor",{"name":24,"type":19},"Panorama",{"name":26,"type":19},"Cloud NGFW",{"name":28,"type":19},"Prisma Access","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":29,"icon":31,"name":32,"slug":33},null,"Vulnerabilities","vulnerabilities",[35,37],{"category":36},{"id":29,"icon":31,"name":32,"slug":33},{"category":38},{"id":39,"icon":31,"name":40,"slug":41},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[43,47],{"type":44,"value":45,"context":46},"cve","CVE-2026-0330","Palo Alto PAN-OS RCE flaw",{"type":44,"value":48,"context":49},"CVE-2026-0322","Previously reported PAN-OS root code execution vulnerability",[21,18,26],{"controls":52,"vendors":137},[53,80,109],{"slug":54,"name":55,"problem":56,"products":57},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",[58,65,73],{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":54,"product_name":62,"url":63,"description":64},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","Privileged Access Management","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fprivileged-access-management","Gives elevated rights to specific applications only where needed, so users do not need local admin accounts.",{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"beyondtrust","BeyondTrust","\u002Fvendor-logos\u002Fbeyondtrust.png","password-safe","BeyondTrust Password Safe","https:\u002F\u002Fwww.beyondtrust.com\u002Fproducts\u002Fpassword-safe","Privileged password and session management.",{"vendor_slug":74,"vendor_name":21,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"palo-alto-networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-privileged-access-management","Idira Privileged Access Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fhuman\u002Fprivileged-access-management","Privileged access management from the former CyberArk portfolio: vaulting, rotation, just-in-time access and session monitoring.",{"slug":81,"name":82,"problem":83,"products":84},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[85,93,101],{"vendor_slug":86,"vendor_name":87,"vendor_logo":88,"product_slug":89,"product_name":90,"url":91,"description":92},"acalvio","Acalvio","\u002Fvendor-logos\u002Facalvio.png","shadowplex-identity-protection","ShadowPlex Identity Protection","https:\u002F\u002Fwww.acalvio.com\u002Fproducts\u002Fidentity-protection\u002F","Decoy accounts and credentials that expose identity attacks and credential misuse early.",{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"vendor_slug":102,"vendor_name":103,"vendor_logo":104,"product_slug":105,"product_name":106,"url":107,"description":108},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-identity-protection","Falcon Identity Protection","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fnext-gen-identity-security\u002Fidentity-protection\u002F","Detection of identity attacks against Active Directory and Entra ID, with risk-based MFA.",{"slug":110,"name":111,"problem":112,"products":113},"patch-management","Automated patch management","Known holes get closed in days, not months.",[114,122,130],{"vendor_slug":115,"vendor_name":116,"vendor_logo":117,"product_slug":118,"product_name":119,"url":120,"description":121},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":126,"product_name":127,"url":128,"description":129},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":131,"vendor_name":132,"vendor_logo":133,"product_slug":110,"product_name":134,"url":135,"description":136},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",[138],{"slug":74,"name":21,"logo_path":75,"roles":139},[140,141],"affected","reported_by",{"slug":143,"title":144,"body":145,"framework_refs":146,"framework_notes":152},"pan-os-rce-flaw-grants-root-access-via-panorama-patch-now","PAN-OS RCE Flaw Grants Root Access via Panorama — Patch Now","A remote code execution vulnerability (CVE-2026-0330) in Palo Alto Networks' PAN-OS Panorama management platform allows an authenticated administrator with network access to execute arbitrary code with full root privileges. While no active exploitation has been confirmed, flaws in centralized management platforms are high-value targets because compromising them can cascade across all managed devices. The fact that only authenticated access is required lowers the bar for insider threats or attackers who have already obtained valid credentials. Palo Alto Networks has released patches, making prompt remediation the most critical action organizations can take right now.",[147,148,149,150,151],"CIS Control 7: Continuous Vulnerability Management (v8)","CIS Control 12: Network Infrastructure Management (v8)","NIST SP 800-53 SI-2: Flaw Remediation","NIST CSF 2.0 RS.MI-3: Newly identified vulnerabilities are mitigated or documented as accepted risks","NIS2 Article 21(2)(e)",{"NIS2 Article 21(2)(e)":153,"NIST SP 800-53 SI-2: Flaw Remediation":154,"CIS Control 12: Network Infrastructure Management (v8)":155,"CIS Control 7: Continuous Vulnerability Management (v8)":156,"NIST CSF 2.0 RS.MI-3: Newly identified vulnerabilities are mitigated or documented as accepted risks":157},"This point requires security in acquisition, development, and maintenance including vulnerability handling and disclosure, which covers organizations' obligation to respond to vendor-disclosed vulnerabilities like this PAN-OS RCE flaw.","SI-2 requires organizations to identify, report, and correct information system flaws; installing Palo Alto's released patch for CVE-2026-0330 is the direct fulfillment of this control.","CIS Control 12 calls for securing network infrastructure devices including management platforms; restricting network access to Panorama directly addresses what this control requires.","CIS Control 7 requires organizations to continuously assess and remediate vulnerabilities; applying the PAN-OS patch promptly is exactly the remediation action this control mandates for known flaws.","This category directly covers the expectation that once a vulnerability like this RCE flaw is disclosed, the organization acts to mitigate it or formally accepts the risk."]