High-severity RCE vulnerability in Palo Alto Networks PAN-OS

## Overview Palo Alto Networks disclosed a high-severity remote code execution (RCE) vulnerability in PAN-OS software. This affects the management interface of PA-Series, VM-Series firewalls, and Panorama devices. The vulnerability is identified as CVE-2026-0322 and has a CVSS score of 8.6. ## Technical Details An authenticated attacker with network access can exploit this vulnerability to execute arbitrary code with root privileges on the affected firewall. The attack requires the attacker to have access to the management interface. Cloud NGFW and Prisma Access are not affected by this issue. ## Impact If exploited, this vulnerability can lead to unauthorized control over the firewall, potentially compromising the entire network. The risk is significant for organizations that do not follow best practices in securing their management interfaces. ## Mitigation Defenders should immediately restrict access to the management interface to only trusted internal IP addresses. Implementing this measure aligns with Palo Alto Networks' recommended best practice deployment guidelines. Regularly review and update access controls to minimize exposure to this vulnerability.