Palo Alto fixes a root RCE in the PAN-OS management interface, already under limited attack

On October 14, 2026, Palo Alto Networks patched CVE-2026-0322, a code-injection flaw in the PAN-OS management interface that hands root to an authenticated attacker, and confirmed exploitation has already been observed. Patch before October 17 and verify that your management interface is not exposed to the internet.