High-severity RCE vulnerability in Palo Alto Networks PAN-OS management interface

## Overview Palo Alto Networks disclosed a high-severity remote code execution (RCE) vulnerability in the management interface of its PAN-OS software. This vulnerability, tracked as CVE-2026-0322, affects PA-Series and VM-Series firewalls and Panorama devices. Cloud NGFW and Prisma Access are not impacted. ## Technical Details The vulnerability allows an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. This poses a significant risk, as it can lead to unauthorized control over the affected devices. The CVSS score for this vulnerability is 8.6, indicating a high severity level. ## Impact If exploited, this vulnerability can compromise the integrity and availability of the firewall, potentially leading to data breaches or network disruptions. Organizations using the affected PAN-OS versions should prioritize addressing this issue to protect their network infrastructure. ## Mitigation To minimize the risk, Palo Alto Networks recommends restricting access to the management interface to trusted internal IP addresses. Following best practice deployment guidelines is crucial. Administrators should review their network configurations and ensure that only authorized personnel can access the management interface.