PAN-OS CVE-2026-0322 Gives Root on the Firewall, but Only to Someone Already Holding an Admin Login

An attacker who holds valid administrator credentials and can reach the PAN-OS management interface can run code as root on the firewall (CVE-2026-0322, CVSS 4.0 score 8.6). Palo Alto Networks published its advisory on October 14 and said "very limited exploitation has been observed targeting the Palo Alto Networks management interface."

CISA added the flaw to its Known Exploited Vulnerabilities catalog the same day, with a due date of October 17 for federal civilian agencies. The advisory lists no workaround.

What CVE-2026-0322 needs from an attacker

The weakness is code injection (CWE-94) in the management interface of PA-Series and VM-Series firewalls and of Panorama, in both its virtual and M-Series forms. Cloud NGFW and Prisma Access are not affected. The advisory says no special configuration is required to be exposed.

The vector carries high privileges required (PR:H), so this is not a bug an unauthenticated stranger can fire from the internet. Palo Alto gives a second score of 8.5 for deployments where management access is restricted, because the attack vector drops from network to adjacent.

The score understates what the privilege requirement means in practice. Palo Alto says the risk is highest when management access is allowed from external IP addresses on the internet, and an administrator login is exactly what credential theft produces. CSO Online quoted IDC analyst Yih Khai Wong, who said the entry point is probably weak management-access hygiene, not the bug itself, and that "the real risks are credential security and detecting misuse after login, not simply restricting the front door."

What Palo Alto has and has not said about the attacks

The advisory rates exploit maturity as attacked and lists three IP addresses: 66.42.72[.]14, 208.83.239[.]114 and 149.248.47[.]234. The Hacker News describes them as geolocated to the United States.

Palo Alto did not describe the malicious activity, name an actor, or say when exploitation began. It did not say how many customers were affected. The advisory says the flaw was discovered internally, and The Hacker News credits Suraj Siddharudh, a senior principal product security researcher at Palo Alto Networks.

Fixed builds across five PAN-OS branches

Fixes exist for every supported branch, and each train has its own minimum build. PAN-OS 11.2.16 was published on October 15, a day after the advisory.

Branch	Fixed builds, by train
12.2	12.2.4
12.1	12.1.4-h12, 12.1.7-h8, 12.1.10-h2
11.2	11.2.4-h22, 11.2.7-h21, 11.2.10-h15, 11.2.13-h3, 11.2.16
11.1	11.1.4-h37, 11.1.6-h39, 11.1.7-h11, 11.1.10-h35, 11.1.13-h15, 11.1.16-h3
10.2	10.2.7-h38, 10.2.10-h41, 10.2.13-h26, 10.2.16-h11, 10.2.18-h12

Older unsupported versions are affected and have no fix; the advisory says to move to a supported release.

Threat Prevention customers can enable Threat IDs 510046 and 510047 (content version 9159-10287 or later), but the advisory says they give limited coverage and require SSL decryption. Restricting management access to trusted internal addresses or a single jump box reduces exposure.

The three-day window under BOD 26-04

The catalog entry carries the forensic triage requirement from Binding Operational Directive 26-04, which CISA issued on June 10. The directive defines triage as carrying out a forensic triage of the asset to assess whether the system is compromised, and gives three days for it. CSO Online reports that agencies that cannot mitigate must discontinue use of the product.

That is the same window CISA applied to the AhsayCBS flaws it added on October 14. It also sits beside the one exploited bug in Microsoft's October release that CISA listed on October 13.

Operators outside the federal government are not bound by the date. The practical instruction is to upgrade to the build in the table, confirm that the management interface is not reachable from the internet, and review administrator login history for the three listed addresses. CISA lists ransomware use of the flaw as unknown.