A security update addressing a vulnerability in Palo Alto Networks products has been released.
The affected vulnerability is CVE-2026-0322, a post-authentication remote code execution (RCE) vulnerability (a vulnerability that allows a threat actor to execute code remotely) in the PAN-OS management interface.
Affected products include various versions of PAN-OS; specific sub-patch versions listed for each release are targeted.
For PAN-OS 10.2, The affected versions are 10.2.7-H38, 10.2.10-H41, 10.2.13-H26, 10.2.16-H11, versions prior to 10.2.18-H12.
For PAN-OS 11.1, Affected versions include 11.1.4-H37, 11.1.6-H39, 11.1.7-H11, 11.1.10-H35, 11.1.13-H15, and 11.1.16-H3.
PAN-OS 11.2 Applies to versions prior to 11.2.4-H22, 11.2.7-H21, 11.2.10-H15, 11.2.13-H3, and 11.2.16.
PAN-OS 12.1: Versions prior to 12.1.4-H12, 12.1.7-H8, 12.1.10-H2 are affected.
For PAN-OS 12.2, Versions prior to 12.2.4 Are affected.
It is recommended that you update to the latest version with Vulnerability Patches, as instructed on the reference website.
