{
  "id": 14630954,
  "title": "Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation",
  "url": "https://urgent.news/2026/10/15/palo-alto-networks-patches-pan-os-authenticated-rce-flaw-amid-active",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-15T06:17:58.000Z",
  "source": {
    "name": "The Hacker News",
    "slug": "the-hacker-news",
    "url": "https://thehackernews.com/2026/10/palo-alto-networks-patches-pan-os.html"
  },
  "original_language": "en",
  "account": "Palo Alto Networks released security updates on Wednesday to address a critical vulnerability in their PAN-OS software. The flaw, identified as CVE-2026-0322 with a CVSS score of 8.6, allows remote code execution within the management interface of the software. This means an attacker who has legitimate network access could potentially execute arbitrary code with root privileges on the firewall.\n\nThe vulnerability impacts PAN-OS software on PA-Series and VM-Series firewalls, and on Panorama (both virtual and M-Series) firewalls. However, Cloud NGFW and Prisma Access are not affected. The company noted that no special configuration is required to exploit this issue, but they suggested restricting access to the management interface to only trusted internal IP addresses to mitigate the risk.\n\nPalo Alto Networks has observed minimal exploitation of this vulnerability, but they did not provide further details on the nature of the attacks, the origin of the attackers, or when the exploitation began. The issue is geolocated to the U.S., with specific IP addresses assessed to be involved in the exploit attempts.\n\nSenior Principal Product Security Researcher Suraj Siddharudh was credited for discovering and reporting the vulnerability. Cisco also recently warned of a critical flaw in their Secure Email Gateway, CVE-2026-76519, which could allow unauthenticated remote attackers to write arbitrary files and execute commands on the underlying operating system. Both vulnerabilities have been added to the Known Exploited Vulnerabilities (KEV) catalog by the U.S. Cybersecurity and Infrastructure Security Agency (CISA), requiring Federal Civilian Executive Branch agencies to prioritize fixes by October 17, 2026.",
  "summary": "Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation. The vulnerability, tracked as CVE-2026-0322 (CVSS score: 8.6), is a case of remote code execution in the management interface. \"A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS software enables an",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "SecurityWeek",
        "title": "Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution",
        "url": "https://urgent.news/2026/10/15/palo-alto-networks-patches-pan-os-zero-day-exploited-for-remote-code",
        "published": "2026-10-15T06:59:54.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}