Palo Alto Networks has graciously informed us of a high-severity zero-day vulnerability in its PAN-OS, known as CVE-2026-0322, potentially letting miscreants run wild on firewalls. Because who wouldn’t want a little root access with their morning coffee?
This delightful glitch affects the management interface of PAN-OS and requires that attackers already have network access. It’s just a shame that you need existing credentials to exploit this, meaning all the fun is reserved for those on the inside. Palo Alto claims there's been "very limited" exploitation of this flaw so far. Apparently, less is more when it comes to breach attempts.
The vulnerability scores a riveting 8.6 on the severity scale and impacts PA-Series and VM-Series firewalls, among others. Fortunately, their fancy Cloud NGFW and Prisma Access services have somehow dodged this bullet.
To avoid any mishaps, Palo Alto suggests you limit access to the management interface to trusted IPs only. A revolutionary idea, really. They've also rolled out fixes for various PAN-OS versions, leaving anyone stuck on outdated versions to figure out how to upgrade—because that’s always a breeze.
No known workarounds exist for this issue, but if you fancy a bit of "limited protection," those with Threat Prevention subscriptions can enable signatures to catch a few known attack patterns. Palo Alto warns, though, that creative hackers might still slip through the cracks with their own variations.
The flaw was discovered by Suraj Siddharudh, a senior principal product security researcher. Meanwhile, Palo Alto has shared three IP addresses that have been a bit too eager to exploit this vulnerability.
In the grand scheme, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has jumped on this bandwagon, slapping CVE-2026-0322 into its "Known Exploited Vulnerabilities catalog." They've mandated that federal agencies find a way to mitigate this disaster by October 17. Because nothing says effective oversight like a tight deadline on dealing with critical vulnerabilities.
