Palo Alto Networks has released security updates for a serious vulnerability in PAN-OS impacting PA-Series and VM-Series firewalls, as well as Panorama.
The issue allows authenticated network users to perform remote code execution with root privileges via the management interface.
Limited exploitation has been observed in the wild.
Affected organizations should prioritize updates and restrict management interface access.
The US CISA has mandated that federal agencies apply these patches by October 17, 2026.
Which systems are affected?
The issue affects PA-Series and VM-Series firewalls, as well as Panorama software. Cloud NGFW and Prisma Access services are not affected by this vulnerability.
Incidents and protective measures
The company confirmed that it has seen limited attacks exploiting the issue. These attempts have been linked to three specific Internet addresses in the US. The vulnerability was discovered by Suraj Siddharudh of Palo Alto Networks and has been added to the list of exploits already in active use by the US CISA.
Palo Alto Networks has released software updates that fix the issue and recommends restricting access to the systems' management interface. US federal agencies are required to implement the fixes by October 17, 2026.
G
Hacks.gr on Google
Set it as a preferred source for cybersecurity updates.
Preferred source
Top comments (0)