← Global Threat Landscape

CVE-2026-0322

CWE-94

Final Priority

High

74.0

Raw RPS

Description

A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma® Access are not impacted by this vulnerability.

Source: NVD

Signals

CVSS
7.2
High · v3.1
EPSS
1.21%
Probability of exploitation in the next 30 days (FIRST) · Percentile: 68.3%
CISA KEV
In CISA KEV since Oct 2026
Confirmed exploitation in the wild (CISA KEV)
Upstream fix commit
No verified fix commit in DevSecure data
Sources: MoreFixes, FreshFixes
SSVC inputs (CISA)
Exploitation: Active · Automatable: No · Technical impact: Total
CISA's assessed SSVC inputs, not a decision. A decision also needs your mission and public well-being context. Context only; not part of the RPS score.
Weakness
CWE-94
Published
14 Oct 2026
Last modified 15 Oct 2026

How to read these signals: RPS · EPSS · CISA KEV · Data sources

What would change this priority?

  • •Stays at least High while it is in CISA KEV (KEV floor).

Explains the published RPS formula and priority rules; it doesn't change the score. How priority works

Get this score from the API

curl -H "Authorization: Bearer dsec_live_xxxxxxxx" \
  https://api.intelligence.devsecure.io/api/v1/rps/CVE-2026-0322

Replace the placeholder with your key. Get a free API key or rank your own CVEs.

Data as of 23 Oct 2026, 05:17 UK time

This product uses the NVD API but is not endorsed or certified by the NVD. Data sources and licences

CVE-2026-0322 · RPS 74.0 · DevSecure Intelligence