CISA adds Palo Alto PAN-OS flaw to the KEV catalog (CVE-2026-0322)

CISA has added a Palo Alto Networks PAN-OS flaw (CVE-2026-0322) to the Known Exploited Vulnerabilities catalog. The flaw allows authenticated root-level remote code execution through the management interface. Palo Alto Networks reports that exploitation observed so far is very limited.

As with every KEV entry, the listing means the flaw is being used in the wild; federal agencies face a remediation deadline, and private organizations should treat it the same way.

Sources: CISA, Palo Alto Networks, BleepingComputer