Free practical cybersecurity guidance for organisations without a security team.
hello@actionsoncyber.com
Actions On Cyber logo
Contact
← Back to Vulnerability Briefs

Urgent Security Flaw Found in Palo Alto Networks Firewalls

A serious security weakness has been found in Palo Alto Networks PAN-OS software used in many firewalls. This flaw lets attackers with access to the management interface take full control of the firewall. It is actively being exploited, so organisations using these firewalls need to act quickly to protect their networks.

15 October 2026

Reference: CVE-2026-0322

1. What is being reported?

The report describes a remote code execution vulnerability in the management interface of Palo Alto Networks PAN-OS software. This means someone who can log into the firewall’s management system could run harmful commands with full system rights, potentially taking over the device. The problem affects physical and virtual firewalls from Palo Alto Networks but not their cloud firewall services.

2. What this means in plain English

If your organisation uses these Palo Alto firewalls and the management interface is accessible to attackers, your network security could be seriously compromised. An attacker could gain control of your firewall, potentially disrupting your internet access or exposing your data. However, if your firewall management interface is properly restricted to trusted internal users only, the risk is lower.

3. Could this affect a small business?

Small businesses using Palo Alto Networks PA-Series or VM-Series firewalls or Panorama management systems could be affected if their firewall management interface is reachable by unauthorised users. Those using cloud-based Palo Alto services or who have restricted access to the management interface are less likely to be impacted.

4. What to do now

  • Check with your IT provider if you use Palo Alto Networks firewalls or Panorama management software.
  • Ensure the firewall management interface is only accessible from trusted internal IP addresses, not the internet.
  • Apply any security updates or mitigations provided by Palo Alto Networks as soon as possible.
  • Review your firewall’s exposure and access controls following official security guidance.

5. Ask your IT provider

Can you confirm if our Palo Alto Networks firewall management interface is properly restricted and patched against the CVE-2026-0322 vulnerability?

6. Bottom line

If you use Palo Alto Networks firewalls, act quickly to check and secure your management interface to prevent attackers from taking control.

Information sourced from CISA KEV, NVD, and multiple reputable security news reports.

Back to Vulnerability Briefs