Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation

Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation. The vulnerability, tracked as CVE-2026-0322 CVSS score: 8.6, is a case of remote code execution in the management interface. "A remote code execution RCE...

CVE-2026-0320

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS management interface. The security ris...

CVE-2026-0316

A stored cross-site scripting XSS vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface. The security risk posed by this issue is minimized when the management interface is restricted t...

EUVD-2026-101668

A stored cross-site scripting XSS vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface. The security risk posed by this issue is minimized when the management interface is restricted t...

CVE-2026-0316

A stored cross-site scripting (XSS) vulnerability exists in Palo Alto Networks PAN-OS software. This flaw allows a malicious authenticated administrator to store or execute a JavaScript payload via the web interface. The vulnerability affects PA-Series and VM-Series firewalls, as well as Panorama...

CVE-2026-0316 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability

A stored cross-site scripting XSS vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface. The security risk posed by this issue is minimized when the management interface is restricted t...

EUVD-2026-101631

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS management interface. The security ris...

CVE-2026-0320 PAN-OS: Authenticated Admin Command Injection Vulnerability

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS management interface. The security ris...

CVE-2026-0320

Palo Alto Networks PAN-OS software contains a command injection vulnerability (CWE-78) that allows an authenticated administrator to bypass system restrictions and execute arbitrary commands as a root user . This issue affects PA-Series and VM-Series firewalls, as well as Panorama (virtual and M-...

CVE-2026-0322

A remote code execution RCE vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by this issue is minimized by restricting acce...

EUVD-2026-101495

A remote code execution RCE vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by this issue is minimized by restricting acce...

CVE-2026-0322 PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface

A remote code execution RCE vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by this issue is minimized by restricting acce...

CVE-2026-0322

Palo Alto Networks PAN-OS software is affected by a remote code execution (RCE) vulnerability in its management interface. An authenticated attacker with network access can exploit this flaw to execute arbitrary code with root privileges on the firewall. This issue impacts PA-Series and VM-Series...

PAN-OS: Authenticated Admin Command Injection Vulnerability

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS management interface. The security ris...

PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface

A remote code execution RCE vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by this issue is minimized by restricting acce...

Palo Alto Networks PAN-OS 11.1.x < 11.1.16-h3 / 11.2.x < 11.2.16 / 12.1.x < 12.1.10-h2 / 12.2.x < 12.2.4 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 11.1.x prior to 11.1.16-h3, 11.2.x prior to 11.2.16, 12.1.x prior to 12.1.10-h2, or 12.2.x prior to 12.2.4. It is, therefore, affected by a vulnerability. A stored cross-site scripting XSS vulnerability in Palo Alto Networks...

PT-2026-113729

Name of the Vulnerable Software and Affected Versions PAN-OS versions prior to 12.2.4 PAN-OS versions prior to 12.1.10-h2 PAN-OS versions prior to 11.2.16 PAN-OS versions prior to 11.1.16-h3 PAN-OS versions prior to 10.2 hotfix Description A code injection issue exists in the management interface...

Palo Alto Networks PAN-OS 10.2.x / 11.1.x / 11.2.x / 12.1.x / 12.2.x Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is a vulnerable version of 10.2.x, 11.1.x, 11.2.x, 12.1.x, or 12.2.x. It is, therefore, affected by a vulnerability. A remote code execution RCE vulnerability in the management interface of Palo Alto Networks PAN-OS software...

cve-2026-0300-audit

CVE-2026-0300 Audit Tooling Read-only audit tooling for CVE-2026-0300 — the unauthenticated buffer overflow in the PAN-OS User-ID Authentication Portal formerly known as "Captive Portal" on PA-Series and VM-Series firewalls. This repo accompanies Tailwind Resource Group security advisory...

CVE-2026-0308

A stored cross-site scripting XSS vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface. This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama...