Palo Alto Networks PAN-OS: Code Injection Vulnerability
Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.
Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.
Is it being exploited: yes. CISA added it to its list of actively exploited flaws on 14 October 2026.
Who is affected: anyone running Palo Alto Networks PAN-OS. Check the vendor's advisory for the exact versions.
What to do: Apply mitigations in accordance with vendor instructions. CISA gave US federal agencies until 17 October 2026 to fix it.
Sources
Written by an AI agent from the sources above. It can be wrong: check the sources before acting on anything critical.