Live and recent posts from across the Fediverse tagged #cve20260322, aggregated by home.social.
Palo Alto Networks patched the PAN-OS CVE-2026-0322 zero-day vulnerability exploited in limited attacks to achieve root code execution on firewalls.
#PaloAltoNetworks #PANOS #CVE20260322 #ZeroDay #Cybersecurity
https://meterpreter.org/pan-os-cve-2026-0322-zero-day/?utm_source=mastodon&utm_medium=jetpack_social
CVE-2026-0322: Actively Exploited PAN-OS RCE Flaw Enables Root Access
Palo Alto Networks has released security updates addressing CVE-2026-0322, a high-severity remote code execution vulnerability affecting the management interface of PAN-OS. The flaw carries a CVSS 4.0 score of 8.6 and enables an authenticated attacker with network access to execute arbitrary code with root privileges on a vulnerable appliance/system. Palo Alto Networks disclosed the issue […] The post CVE-2026-0322: Actively Exploited PAN-OS RCE Flaw Enables Root Access appeared first on SOC Prime .
Pulse ID: 6ad0bfe0fe1ebf8f6b3f19c9
Pulse Link: https://otx.alienvault.com/pulse/6ad0bfe0fe1ebf8f6b3f19c9
Pulse Author: CyberHunter_NL
Created: 2026-10-15 11:58:24
Be advised, this data is unverified and should be considered preliminary. Always do further verification.
Palo Alto Networks Fixes Authenticated RCE Flaw Under Active Exploitation
Palo Alto Networks has patched a critical vulnerability, CVE-2026-0322, that allowed hackers to execute malicious code with root privileges on its firewalls - and it was under active attack. This authenticated remote code execution flaw, scoring 8.6 in severity, could be exploited by anyone with network access to the…
#PaloAltoNetworks #Cve20260322 #RemoteCodeExecution #Panos #AuthenticatedRce
Hackers Exploit Palo Alto PAN-OS 0-day Flaw to Gain Root Code Execution on Firewalls
Hackers are exploiting a high-severity flaw in Palo Alto Networks PAN-OS that allows authenticated attackers to run code with root privileges on affected firewalls. Tracked as CVE-2026-0322, the vulnerability affects the management interface, with the company confirming “very limited exploitation” and urging customers to apply fixes as soon as possible. Palo Alto Networks published its […] The post Hackers Exploit Palo Alto PAN-OS 0-day Flaw to Gain Root Code Execution on Firewalls appeared first on Cyber Security News .
Pulse ID: 6ad04ef4ab212bf6bd0849e7
Pulse Link: https://otx.alienvault.com/pulse/6ad04ef4ab212bf6bd0849e7
Pulse Author: CyberHunter_NL
Created: 2026-10-15 03:56:36
Be advised, this data is unverified and should be considered preliminary. Always do further verification.
Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls. [...]
Pulse ID: 6ad016777a22b36655d161ff
Pulse Link: https://otx.alienvault.com/pulse/6ad016777a22b36655d161ff
Pulse Author: CyberHunter_NL
Created: 2026-10-14 23:55:35
Be advised, this data is unverified and should be considered preliminary. Always do further verification.
Palo Alto Networks Discloses Exploited PAN-OS Zero-Day Flaw
Palo Alto Networks has patched a high-severity zero-day flaw, CVE-2026-0322, that lets hackers execute code as root on vulnerable firewalls and appliances. The company says only limited exploitation has been observed so far, but urges users to update their PAN-OS management interface ASAP.
#Panos #ZeroDay #Cve20260322 #PaloAltoNetworks #RemoteCodeExecution
🚨 [CISA-2026:1014] CISA Adds 4 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1014)
CISA has added 4 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.
⚠️ CVE-2026-0322 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-0322)
- Name: Palo Alto Networks PAN-OS Code Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Palo Alto Networks
- Product: PAN-OS
- Notes: https://security.paloaltonetworks.com/CVE-2026-0322 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-0322
⚠️ CVE-2026-105133 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-105133)
- Name: Ahsay AhsayCBS Improper Authentication Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Ahsay
- Product: AhsayCBS
- Notes: https://www.ahsay.com/en/company/announcements/patch-cve-105133-105134-update ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-105133
⚠️ CVE-2026-105134 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-105134)
- Name: Ahsay AhsayCBS Command Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Ahsay
- Product: AhsayCBS
- Notes: https://www.ahsay.com/en/company/announcements/patch-cve-105133-105134-update ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-105134
⚠️ CVE-2026-76519 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-76519)
- Name: Cisco Secure Email Gateway Relative Path Traversal Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Cisco
- Product: Secure Email Gateway
- Notes: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-76519
#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261014 #cisa20261014 #cve_2026_0322 #cve_2026_105133 #cve_2026_105134 #cve_2026_76519 #cve20260322 #cve2026105133 #cve2026105134 #cve202676519
Attackers are actively exploiting CVE-2026-0322, a high-severity Palo Alto PAN-OS RCE vulnerability in the management interface. Apply patches right now.
#CVE20260322 #PaloAltoNetworks #PANOS #RCE #FirewallSecurity #Cybersecurity #InfoSec