Palo Alto Networks zero-day: CVE-2026-0322 (CVSS4: 8.6 high)PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface
> Very limited exploitation has been observed targeting the Palo Alto Networks management interface.
CISA added this to the KEV Catalog today: https://www.cisa.gov/news-events/alerts/2026/10/14/cisa-adds-four-known-exploited-vulnerabilities-catalog
#paloaltonetworks #zeroday #KEV #CISA #eitw
ssvc
npub1dv…jfshx
2026-10-14 20:28:20 UTC
Author Public Key
npub1dvrxvdpkggqs4eq5m670khgenxgzqqwmlq8a3kkcru85dsg7e2rsqjfshxSeen on
wss://relay.momostr.pinkPublished at
2026-10-14 20:28:20 UTCEvent JSON
{
"id": "2915c069686a60dc9f9304cdb32e0d3f82017f3321eb48e026bf10f431b542cb",
"pubkey": "6b0666343642010ae414debcfb5d1999902001dbf80fd8dad81f0f46c11eca87",
"created_at": 1792009700,
"kind": 1,
"tags": [
[
"t",
"kev"
],
[
"t",
"paloaltonetworks"
],
[
"t",
"zeroday"
],
[
"t",
"cisa"
],
[
"t",
"eitw"
],
[
"proxy",
"https://infosec.exchange/@ssvc/117441147741268577",
"web"
],
[
"proxy",
"https://infosec.exchange/ap/users/117202824925377048/statuses/117441147741268577",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/ap/users/117202824925377048/statuses/117441147741268577",
"pink.momostr"
],
[
"-"
]
],
"content": "Palo Alto Networks zero-day: CVE-2026-0322 (CVSS4: 8.6 high)PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface\n\n\u003e Very limited exploitation has been observed targeting the Palo Alto Networks management interface.\n\nCISA added this to the KEV Catalog today: https://www.cisa.gov/news-events/alerts/2026/10/14/cisa-adds-four-known-exploited-vulnerabilities-catalog\n\n#paloaltonetworks #zeroday #KEV #CISA #eitw",
"sig": "0422e63990c9282bd859751b53eb04ac9a7cf55db64e5b85a05af39a7afb15d0a9b6fe490cf24d0030312e3fc4d44a595e3237e91c15c94a1f362a6f970e3931"
}