Palo Alto Networks releases security updates to address a high-severity zero-day in its PAN-OS software that is being exploited to achieve remote code execution. Multiple outlets report that the vulnerability, tracked as CVE-2026-0322, affects the management interface and carries a high CVSS score of 8.6.
The company says it is aware of limited exploitation against customers’ firewalls and provides indicators of compromise (IoCs) to help defenders detect related activity. While the reports agree on the flaw’s impact and active, in-the-wild use, they frame the urgency slightly differently—focusing on the management-interface RCE detail (Hacker News), the warning to customers about ongoing attacks (Bleeping Computer), and the company’s published response that includes IoCs and patched versions (SecurityWeek).
