CISAAnalysisCISA adds exploited Palo Alto Networks PAN-OS management flaw to KEV catalog
What happened.CISA added an actively exploited remote code execution vulnerability in the Palo Alto Networks PAN-OS management interface to its Known Exploited Vulnerabilities catalog.
Why it matters.Enterprise edge firewalls protect perimeter boundaries, and root-level command access allows threat actors to disable intrusion telemetry and pivot silently into internal subnets. Security teams should restrict all PAN-OS administrative interfaces to internal management networks and apply available vendor patches immediately.
The technical specifications:
- Vulnerability characteristics: Tracked as CVE-2026-0322 with an 8.6 CVSS score, the defect enables authenticated network adversaries with management interface access to execute arbitrary commands with root privileges.
- Affected infrastructure: The flaw impacts PAN-OS software deployed on hardware PA-Series firewalls, virtualized VM-Series gateways, and Panorama centralized management appliances across versions 10.2 through 12.2.
- Mandatory deadline: Federal civilian executive branch agencies must apply vendor maintenance updates or isolate internet-facing management access under Binding Operational Directive 26-04 timelines.