CVE-2026-0322

An authenticated attacker with network access can execute arbitrary root code on Palo Alto Networks PAN-OS firewalls via a code injection flaw.

This code injection vulnerability allows an attacker with network access to execute arbitrary root code on PAN-OS firewalls, enabling full system compromise. DIB organizations must ensure PAN-OS is patched immediately, as this flaw represents a severe, avoidable risk that could lead to data breaches or ransomware deployment. The vendor's track record of critical RCE flaws in PAN-OS underscores the need for rigorous supply-chain validation and continuous monitoring.

Shame score — A critical RCE flaw in a core network security product that allows root code execution via code injection, compounded by Palo Alto Networks' recurring history of severe vulnerabilities in PAN-OS.