UpHeron
All vulnerabilities

Servers and applications

CVE-2026-0322

A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended …

Actively exploited: CISA added it to its Known Exploited Vulnerabilities catalog on 14 Oct 2026.

Severity
High 8.6
Published
14 Oct 2026
Last changed
15 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
10.2.0, 12.2.4
Sources
NVD

Affected software

SoftwareAffected versions
Palo Alto Networks PAN-OSServers and applications · cpe:o:paloaltonetworks:pan-os
  • From 12.2.0 before 12.2.4
  • Version 12.1.10
  • Version 12.1.9
  • Version 12.1.8
All 251 release lines
  • Every version before 10.2.0
  • Version 10.2.7
  • Version 10.2.7-h1
  • Version 10.2.7-h3
  • Version 10.2.7-h6
  • Version 10.2.7-h8
  • Version 10.2.7-h12
  • Version 10.2.7-h16
  • Version 10.2.7-h18
  • Version 10.2.7-h19
  • Version 10.2.7-h21
  • Version 10.2.7-h24
  • Version 10.2.7-h32
  • Version 10.2.7-h34
  • Version 10.2.7-h35
  • Version 10.2.7-h36
  • Version 10.2.7-h37
  • Version 10.2.8
  • Version 10.2.9
  • Version 10.2.10
  • Version 10.2.10-h2
  • Version 10.2.10-h3
  • Version 10.2.10-h4
  • Version 10.2.10-h5
  • Version 10.2.10-h7
  • Version 10.2.10-h9
  • Version 10.2.10-h10
  • Version 10.2.10-h12
  • Version 10.2.10-h14
  • Version 10.2.10-h17
  • Version 10.2.10-h18
  • Version 10.2.10-h21
  • Version 10.2.10-h27
  • Version 10.2.10-h30
  • Version 10.2.10-h31
  • Version 10.2.10-h36
  • Version 10.2.10-h37
  • Version 10.2.10-h39
  • Version 10.2.10-h40
  • Version 10.2.11
  • Version 10.2.12
  • Version 10.2.13
  • Version 10.2.13-h1
  • Version 10.2.13-h2
  • Version 10.2.13-h3
  • Version 10.2.13-h4
  • Version 10.2.13-h5
  • Version 10.2.13-h7
  • Version 10.2.13-h10
  • Version 10.2.13-h15
  • Version 10.2.13-h16
  • Version 10.2.13-h18
  • Version 10.2.13-h21
  • Version 10.2.13-h22
  • Version 10.2.13-h23
  • Version 10.2.13-h24
  • Version 10.2.14
  • Version 10.2.15
  • Version 10.2.16
  • Version 10.2.16-h1
  • Version 10.2.16-h4
  • Version 10.2.16-h6
  • Version 10.2.16-h7
  • Version 10.2.16-h8
  • Version 10.2.16-h9
  • Version 10.2.16-h10
  • Version 10.2.17
  • Version 10.2.18
  • Version 10.2.18-h1
  • Version 10.2.18-h5
  • Version 10.2.18-h6
  • Version 10.2.18-h7
  • Version 10.2.18-h8
  • Version 10.2.18-h9
  • Version 10.2.18-h10
  • Version 11.1.0
  • Version 11.1.1
  • Version 11.1.2
  • Version 11.1.3
  • Version 11.1.4
  • Version 11.1.4-h1
  • Version 11.1.4-h4
  • Version 11.1.4-h7
  • Version 11.1.4-h9
  • Version 11.1.4-h13
  • Version 11.1.4-h15
  • Version 11.1.4-h16
  • Version 11.1.4-h17
  • Version 11.1.4-h18
  • Version 11.1.4-h25
  • Version 11.1.4-h27
  • Version 11.1.4-h32
  • Version 11.1.4-h33
  • Version 11.1.4-h34
  • Version 11.1.4-h35
  • Version 11.1.4-h36
  • Version 11.1.5
  • Version 11.1.6
  • Version 11.1.6-h1
  • Version 11.1.6-h2
  • Version 11.1.6-h3
  • Version 11.1.6-h4
  • Version 11.1.6-h5
  • Version 11.1.6-h6
  • Version 11.1.6-h7
  • Version 11.1.6-h10
  • Version 11.1.6-h14
  • Version 11.1.6-h17
  • Version 11.1.6-h18
  • Version 11.1.6-h19
  • Version 11.1.6-h20
  • Version 11.1.6-h21
  • Version 11.1.6-h22
  • Version 11.1.6-h23
  • Version 11.1.6-h25
  • Version 11.1.6-h29
  • Version 11.1.6-h32
  • Version 11.1.6-h33
  • Version 11.1.6-h34
  • Version 11.1.6-h35
  • Version 11.1.6-h36
  • Version 11.1.6-h38
  • Version 11.1.7
  • Version 11.1.7-h1
  • Version 11.1.7-h2
  • Version 11.1.7-h4
  • Version 11.1.7-h6
  • Version 11.1.7-h8
  • Version 11.1.7-h10
  • Version 11.1.8
  • Version 11.1.9
  • Version 11.1.10
  • Version 11.1.10-h1
  • Version 11.1.10-h4
  • Version 11.1.10-h5
  • Version 11.1.10-h7
  • Version 11.1.10-h9
  • Version 11.1.10-h10
  • Version 11.1.10-h12
  • Version 11.1.10-h21
  • Version 11.1.10-h25
  • Version 11.1.10-h26
  • Version 11.1.10-h27
  • Version 11.1.10-h28
  • Version 11.1.10-h30
  • Version 11.1.10-h32
  • Version 11.1.10-h33
  • Version 11.1.11
  • Version 11.1.12
  • Version 11.1.13
  • Version 11.1.13-h1
  • Version 11.1.13-h2
  • Version 11.1.13-h3
  • Version 11.1.13-h5
  • Version 11.1.13-h6
  • Version 11.1.13-h7
  • Version 11.1.13-h8
  • Version 11.1.13-h9
  • Version 11.1.13-h10
  • Version 11.1.13-h11
  • Version 11.1.13-h12
  • Version 11.1.14
  • Version 11.1.15
  • Version 11.1.16
  • Version 11.1.16-h1
  • Version 11.1.16-h2
  • Version 11.2.0
  • Version 11.2.1
  • Version 11.2.2
  • Version 11.2.3
  • Version 11.2.4
  • Version 11.2.4-h1
  • Version 11.2.4-h2
  • Version 11.2.4-h4
  • Version 11.2.4-h5
  • Version 11.2.4-h6
  • Version 11.2.4-h7
  • Version 11.2.4-h8
  • Version 11.2.4-h9
  • Version 11.2.4-h10
  • Version 11.2.4-h11
  • Version 11.2.4-h12
  • Version 11.2.4-h14
  • Version 11.2.4-h15
  • Version 11.2.4-h17
  • Version 11.2.4-h18
  • Version 11.2.4-h20
  • Version 11.2.5
  • Version 11.2.6
  • Version 11.2.7
  • Version 11.2.7-h1
  • Version 11.2.7-h2
  • Version 11.2.7-h3
  • Version 11.2.7-h4
  • Version 11.2.7-h7
  • Version 11.2.7-h8
  • Version 11.2.7-h10
  • Version 11.2.7-h11
  • Version 11.2.7-h12
  • Version 11.2.7-h13
  • Version 11.2.7-h14
  • Version 11.2.7-h15
  • Version 11.2.7-h16
  • Version 11.2.7-h17
  • Version 11.2.7-h18
  • Version 11.2.7-h19
  • Version 11.2.8
  • Version 11.2.9
  • Version 11.2.10
  • Version 11.2.10-h1
  • Version 11.2.10-h2
  • Version 11.2.10-h3
  • Version 11.2.10-h4
  • Version 11.2.10-h5
  • Version 11.2.10-h6
  • Version 11.2.10-h7
  • Version 11.2.10-h8
  • Version 11.2.10-h9
  • Version 11.2.10-h10
  • Version 11.2.10-h12
  • Version 11.2.10-h13
  • Version 11.2.11
  • Version 11.2.12
  • Version 11.2.13
  • Version 11.2.13-h1
  • Version 11.2.13-h2
  • Version 11.2.15
  • Version 12.1.2
  • Version 12.1.3
  • Version 12.1.4
  • Version 12.1.4-h2
  • Version 12.1.4-h3
  • Version 12.1.4-h5
  • Version 12.1.4-h6
  • Version 12.1.4-h7
  • Version 12.1.4-h8
  • Version 12.1.4-h9
  • Version 12.1.4-h10
  • Version 12.1.4-h11
  • Version 12.1.5
  • Version 12.1.6
  • Version 12.1.7
  • Version 12.1.7-h1
  • Version 12.1.7-h2
  • Version 12.1.7-h3
  • Version 12.1.7-h5
  • Version 12.1.7-h6
  • Version 12.1.8
  • Version 12.1.9
  • Version 12.1.10
  • From 12.2.0 before 12.2.4

Known exploited

CISA name
Palo Alto Networks PAN-OS Code Injection Vulnerability
Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or…
Due for US agencies
17 Oct 2026
Used in ransomware
Not known

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-0322
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-0322