Palo Alto patches exploited PAN-OS RCE CVE-2026-0322
Palo Alto patched CVE-2026-0322, an authenticated RCE in the PAN-OS management interface rated CVSS 8.6, after observing limited exploitation. Restrict the interface and upgrade now.
Stories tagged: #pan-os
Palo Alto GlobalProtect auth bypass (CVE-2026-0257) added to CISA KEV after weeks of exploitation
PAN-OS portals with authentication-override cookies on a shared certificate let attackers forge a valid session. Rapid7 observed exploitation since May 17. Federal patch deadline June 19.