[CLSTR]
< Back to all clusters
[TECHNOLOGY] · United States · 11 sources

started · updated

Part of situation: Cybersecurity industry AI defense and vulnerability trends (15 clusters)

Palo Alto Networks warns of active exploitation of PAN-OS zero-day flaw

Palo Alto Networks PAN-OS CVE-2026-0322 zero-day vulnerability CISA

Palo Alto Networks has disclosed a high-severity zero-day vulnerability in its PAN-OS firewall software, identified as CVE-2026-0322. The flaw, a code injection weakness (CWE-94), allows an authenticated attacker with network access to the management interface to execute arbitrary code with root privileges.

The vulnerability affects PAN-OS on PA-Series and VM-Series firewalls, as well as Panorama. It has been assigned a CVSS 4.0 score of 8.6. While the company reports that only very limited exploitation has been observed, the risk is heightened if the management interface is accessible from the internet.

In response, the US Cybersecurity and Infrastructure Security Agency (CISA) has added the flaw to its Known Exploited Vulnerabilities catalog. CISA has ordered US federal agencies to apply necessary patches or mitigations and conduct forensic triage to check for potential compromises by October 17.

Entities

CISA · PAN-OS · Palo Alto Networks · United States

Claims

What the coverage asserts, and how many sources carry each claim.

  • [○ 1 SOURCE] The vulnerability affects PA-Series and VM-Series firewalls and Panorama.
  • [○ 1 SOURCE] CISA added CVE-2026-0322 to its Known Exploited Vulnerabilities catalog. www.csoonline.com
  • [○ 1 SOURCE] Cloud NGFW and Prisma Access are not affected by the flaw.
  • [○ 1 SOURCE] US federal agencies must fix the flaw and check for compromise by October 17. www.csoonline.com
  • [● 2 SOURCES] Palo Alto Networks disclosed vulnerability CVE-2026-0322 on October 14, 2026. www.csoonline.com · sempreupdate.com.br
  • [● 3 SOURCES] The vulnerability is classified as a code injection weakness (CWE-94). www.csoonline.com · sempreupdate.com.br
  • [● 3 SOURCES] The CVSS 4.0 score for the vulnerability is 8.6. www.csoonline.com · sempreupdate.com.br
  • [● 3 SOURCES] The flaw allows an authenticated attacker with network access to execute arbitrary code with root privileges. www.csoonline.com · sempreupdate.com.br
  • [● 3 SOURCES] The flaw has a CVSS 4.0 score of 8.6. www.csoonline.com · sempreupdate.com.br
  • [○ 1 SOURCE] The US Cybersecurity and Infrastructure Security Agency added CVE-2026-0322 to its Known Exploited Vulnerabilities catalog. www.csoonline.com
  • [● 3 SOURCES] The vulnerability is tracked as CVE-2026-0322 and is classified as a CWE-94 code injection weakness. www.csoonline.com · sempreupdate.com.br
  • [○ 1 SOURCE] US federal agencies have been ordered to fix the vulnerability and check for compromise by October 17. www.csoonline.com

Sources

Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug [cybernoz.com]
37-Year-Old Integer Overflow Chains To Root OpenBSD 7.9 [bitnewsbot.com]
2026-10-16 Briefing [alobbs.com]
Attackers exploit Palo Alto PAN-OS flaw for root access as CISA orders three-day fix [www.csoonline.com]
Falha crítica PwnEscape no kernel Linux permite que máquinas virtuais leiam a memória do host [totalsecurity.com.br]
CVE-2026-99999: Critical Linux PwnEscape Flaw [socprime.com]
Cuatro nuevos avisos de seguridad | INCIBE | INCIBE [www.incibe.es]
Multiples vulnérabilités dans le noyau Linux d'Ubuntu - CERT-FR [www.cert.ssi.gouv.fr]
The Cyber Express Weekly Roundup: Hackers Turn Supermarket Freezers Into Ovens, UPI PIN Theft and More [thecyberexpress.com]
Palo Alto corrige falha crítica no PAN-OS sob ataque [sempreupdate.com.br]
Palo Alto Networks: 95% of critical infrastructure leaders concerned about frontier AI-powered attacks [www.expresscomputer.in]