Security Roundup: 15 Oct 2026

One story clears the bar today: a PAN-OS management interface flaw.

• Palo Alto Networks says an authenticated attacker can run code as root through the PAN-OS management interface.

Security

PAN-OS management interface code injection, with exploitation observed

Palo Alto Networks advisory

Palo Alto Networks says CVE-2026-0322 lets an authenticated attacker with network access to the management interface run code as root, rates it 8.6, and reports very limited exploitation. It hits PAN-OS on PA-Series and VM-Series firewalls and Panorama, and the risk is highest when the interface is reachable from the internet. Cloud NGFW and Prisma Access are not affected.

This week. Find every management interface reachable from outside a trusted network, restrict it to a jump box, then upgrade to the fixed build for your branch.