Palo Alto Networks has disclosed multiple vulnerabilities affecting its PAN-OS operating system that powers the company’s firewall appliances and management products. On 14 October 2026 the vendor released seven security advisories covering seven distinct issues, one of which has already been confirmed as exploited in real-world attacks.
The most critical finding is CVE-2026-0322, an authenticated code-injection vulnerability in the management interface of PA-series and VM-series firewalls as well as the Panorama centralized management solution. Although exploitation requires valid credentials, an attacker who obtains them can execute arbitrary commands with root privileges over the network. The flaw received a CVSS v4.0 base score of 8.6 and was given the highest remediation priority rating of “Highest.” Palo Alto Networks stated that exploitation remains limited but has been observed.
The remaining six vulnerabilities comprise one high-severity, four medium-severity, and two low-severity issues. They include denial-of-service conditions in network services, command-injection flaws, improper input handling, and a stored cross-site scripting vulnerability. Full details are available in the individual advisories published by the vendor.
Products explicitly stated to be unaffected include Cloud NGFW and Prisma Access. Administrators are strongly encouraged to apply the latest PAN-OS updates as soon as possible to mitigate the risk posed by the actively exploited flaw.
