


High
CVE-2026-0322
Palo Alto Networks
October 15, 2026
Twelve CVEs plus a Chromium update; none Critical. Highest is CVE-2026-0322, an authenticated PAN-OS management RCE at CVSS 8.6.
Palo Alto Networks
Apply vendor patch
PAN-OS, Cloud NGFW, Prisma Access, Panorama, GlobalProtect App, Prisma Browser, Cortex XSOAR, Cortex XSIAM, and Checkov.
Root code execution on firewalls, firewall or Panorama maintenance mode outages, session impersonation, and local privilege escalation.
Command injection, improper input handling, stack buffer overflow, type confusion, path traversal, SSRF, and XSS weaknesses.
Our security experts can help you assess affected systems, validate risk and support a safe remediation plan.
Discuss Your Security ExposureExplore MDR for Palo AltoAssess your risk
Identify affected systems
Plan remediation
Practical, vendor-aligned guidance
Get expert support
From our 24/7 security team
Get the latest threat intelligence and security advisories from Smarttech247.
View All Threat UpdatesDownload the complete analysis, including detailed technical findings and references.
Palo Alto Networks Security Advisories.