If your Palo Alto management interface is internet-exposed, you might notice even more traffic on it today. But if that was your security posture, maybe you're fine with that.
Anyway this is exploited in the wild. Authenticated, so creds required.
https://ifin.network/t/cve-2026-0322-authenticated-rce-in-pan-os/903