MDR
Solutions
Partners
About
Resources
Affected Environment
PAN-OS, Cloud NGFW, Prisma Access, Panorama, GlobalProtect App, Prisma Browser, Cortex XSOAR, Cortex XSIAM, and Checkov.
Threat Overview
Twelve CVEs plus a Chromium update; none Critical. Highest is CVE-2026-0322, an authenticated PAN-OS management RCE at CVSS 8.6.
Exposure Timeline
Published 15 October 2026; the PAN-OS 11.2.16 fix carried a vendor ETA of the same day.
Attack Surface
PAN-OS management and data plane interfaces, GlobalProtect gateway and app, Panorama log processing, and Checkov hosts.
Technical Root Cause
Command injection, improper input handling, stack buffer overflow, type confusion, path traversal, SSRF, and XSS weaknesses.
Exploitation Pathway
Authenticated attackers with management access run root code; unauthenticated attackers send crafted traffic to cause denial of service.
Operational Impact
Root code execution on firewalls, firewall or Panorama maintenance mode outages, session impersonation, and local privilege escalation.
Strategic Impact
Perimeter firewall compromise undermines segmentation and VPN trust; restricting management access sharply reduces exposure.
Required Mitigation
Upgrade to fixed PAN-OS, GlobalProtect, Cortex content pack, and Checkov versions; restrict management interfaces to trusted internal IPs.
Incident Response Guidance
Audit management interface access, review administrator activity for command abuse, and monitor for unexpected maintenance mode events.
References
Palo Alto Networks Security Advisories.
Trusted by clients worldwide
Led by human expertise and powered by the VisionX platform, we provide you with a 24/7 unbeatable Managed Detection & Response capability giving you transparent and consolidated security solutions.
.jpg)