CVE-2026-0322

Vendor

Palo Alto Networks

Product

PAN-OS

EPSS

0.017 (p78)

CISA KEV

added 14 Oct 2026, due 17 Oct 2026 (15d overdue)

Weakness

CWE-94

Exposure class

Edge / VPN / firewall, Email

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 75
   KEV NVD 17d ago

   Palo Alto Networks PAN-OS Code Injection Vulnerability

   Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.

   KEV · due 17 Oct 2026 (overdue) Fix available CVE-2026-0322 Palo Alto Networks
2. 65
   CISA alert CISA 17d ago

   CISA Adds Four Known Exploited Vulnerabilities to Catalog

   CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-0322 Palo Alto Networks PAN-OS Code Injection Vulnerability CVE-2026-76519 Cisco…

   Exploited CVE-2026-0322CVE-2026-76519CVE-2026-105133+1 more Cisco Palo Alto Networks
3. 38
   Palo Alto advisory Palo Alto PSIRT 16d ago

   PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface (Severity: HIGH)

   CVE-2026-0322 Palo Alto Networks
4. 22
   CCCS advisory CCCS 16d ago

   Palo Alto Networks security advisory (AV26-1041)

   CVE-2026-0322 Palo Alto Networks