Palo Alto Networks Warns of PAN-OS RCE Zero-Day Flaw

Summary: Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day vulnerability, tracked as CVE-2026-0322, which has been exploited in attacks targeting firewalls. This flaw is actively being used in the wild.

Palo Alto Networks has issued a warning regarding a critical RCE zero-day vulnerability, tracked as CVE-2026-0322, found in its PAN-OS software. This flaw is actively being exploited in attacks targeting firewalls. Being a zero-day means there was no patch available at the time of its discovery.

This RCE vulnerability allows attackers to remotely execute arbitrary code on Palo Alto Networks firewalls. Typically, such flaws stem from vulnerabilities in network traffic processing or management interfaces. Attackers can thereby compromise a critical point in the network.

For live systems, this situation poses an immediate threat to all organizations using Palo Alto Networks firewalls. Administrators must promptly apply the released security updates and check their systems for signs of potential exploitation. Due to its zero-day nature, the risk was even higher during the pre-patch period.

Firewalls are the first line of defense for a network, making such vulnerabilities extremely dangerous. It is important for engineers to review firewall configurations, disable unnecessary services, and establish additional defense layers like network segmentation. Continuous monitoring of firewall logs and anomaly detection also play a critical role.

🔗 Source: The Hacker News
📡 Authoritative feeds & live tracking: Radar