WATCHExploited vulnerability
Palo Alto Networks PAN-OS
Palo Alto Networks PAN-OS Code Injection Vulnerability
What's happening and what to do
An authenticated attacker with network access can run arbitrary code with root privileges on the firewall, and this flaw is being exploited in the wild. Palo Alto Networks PAN-OS. Apply the vendor's mitigations and update now, and check for signs of compromise.
AI summary of the sources on this page. Regenerated when a source changes.
Signals over time
- 2026-10-14Added to CISA's Known Exploited Vulnerabilities catalog.
- 2026-10-17Federal patch deadline for US agencies.
- 2026-11-03 21:55First seen here.
Source text
Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.