A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker… (CVE-2026-0322)

This vulnerability (CVE-2026-0322) in the PAN-OS management interface enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. It affects PAN-OS software running on PA-Series and VM-Series firewalls and Panorama (virtual and M-Series). The vulnerability does not impact Palo Alto Networks cloud services such as Cloud NGFW and Prisma Access. The vendor recommends restricting management interface access to trusted internal IP addresses to minimize risk.

An authenticated attacker with network access to the management interface can execute arbitrary code with root privileges on the firewall, potentially compromising the device and its security functions. This could lead to full control over the firewall, impacting network security and operations.

The vendor advises restricting access to the management interface to trusted internal IP addresses according to their best practice deployment guidelines. No official patch or fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.