---
title: 'CISA adds Palo Alto PAN-OS flaw to the KEV catalog (CVE-2026-0322)'
url: 'https://www.securteksecurity.com/news/cisa-kev-palo-alto-pan-os-cve-2026-0322'
markdown: 'https://www.securteksecurity.com/news/cisa-kev-palo-alto-pan-os-cve-2026-0322.md'
date: '2026-10-14'
description: 'CISA has added a Palo Alto Networks PAN-OS flaw (CVE-2026-0322) to the Known Exploited Vulnerabilities catalog. The flaw allows authenticated root-level remote code execution through the management interface. Palo Alto Networks reports that exploitation observed so far is very limited. As with ever…'
taxonomy:
  category:
    - Cybersecurity
---

# [CISA adds Palo Alto PAN-OS flaw to the KEV catalog (CVE-2026-0322)](https://www.securteksecurity.com/news/cisa-kev-palo-alto-pan-os-cve-2026-0322)

   14th Oct 2026  

CISA has added a Palo Alto Networks PAN-OS flaw (CVE-2026-0322) to the Known Exploited Vulnerabilities catalog. The flaw allows authenticated root-level remote code execution through the management interface. Palo Alto Networks reports that exploitation observed so far is very limited.

As with every KEV entry, the listing means the flaw is being used in the wild; federal agencies face a remediation deadline, and private organizations should treat it the same way.

Sources: [CISA](https://www.cisa.gov/news-events/alerts/2026/10/14/cisa-adds-four-known-exploited-vulnerabilities-catalog), [Palo Alto Networks](https://security.paloaltonetworks.com/CVE-2026-0322), [BleepingComputer](https://www.bleepingcomputer.com/news/security/palo-alto-networks-warns-of-pan-os-rce-flaw-exploited-in-attacks/)

---

## Navigation

- Parent: [News](https://www.securteksecurity.com/news.md)
- Previous: [CISA adds actively exploited Ivanti Connect Secure zero-day to the KEV catalog](https://www.securteksecurity.com/news/cisa-kev-ivanti-connect-secure-zero-day-cve-2026-104935.md)
- Next: [Cisco Secure Email Gateway zero-day exploited in the wild (CVE-2026-76519)](https://www.securteksecurity.com/news/cisco-secure-email-gateway-zero-day-cve-2026-76519-actively-exploited.md)