No. CVE-2026-0322
Palo Alto firewalls can be taken over by a logged-in user
Being used now
Yes. Attackers are using this right now.
Organizations using Palo Alto Networks firewalls running PAN-OS.
What to do
Apply Palo Alto Networks' update for PAN-OS.
Confirmed in attacksOct 14, 2026
ProductPalo Alto Networks PAN-OS
Attack likelihood, next 30 days1.7%
Attack likelihood is EPSS, a daily estimate from FIRST.org of how likely this bug is to be used in attacks in the next 30 days.
The official description
Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.
For your tech helper or AI assistant
A read-only checklist. Paste it into Claude, ChatGPT or a coding agent; it only looks and changes nothing.
Read-only check, change nothing, send nothing anywhere.
Is Palo Alto Networks PAN-OS (CVE-2026-0322) installed or running on this machine or in this project?
1. Find every copy and its version (apps, packages, containers, lockfiles).
2. Compare each version against the vendor's fixed version for CVE-2026-0322. Quote the vendor page you used.
3. Report a table: where, version, fixed version, status (exposed / fixed / not installed / unsure).
4. List the exact update steps, but do not run them.