CRITICALZero Day
Global

Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks

·Source: BleepingComputer

Updated:

Executive Summary

Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls. [...]

Analysis

Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls. [...]

Indicators of Compromise (1)

CVE (1)
CVE-2026-0322
NVDMITRE CVE
Source Attribution

Originally published by BleepingComputer on Oct 14, 2026.

Related Threats

LOWZero Day

Moving past autonomous exploitation to machine-speed security

Frontier AI advancements have created a world where exploitation outpaces defense. The average enterprise takes 32 to 43 days to patch , but the mean time to exploit a vulnerability is 10 hours . This asymmetry creates questions around how enterprises can trust autonomous AI to operate ubiquitously across their environments. As I mentioned on the TechCrunch Disrupt stage last week, security at mac

CSO Online
CRITICALZero Day

Possible new Cellebrite iPhone Radio Zero-Day

Justin.sh is reporting on a confidential Cellebrite document that has been leaked to him: Cellebrite calls it Advanced Unlocks (AU from here on), not to be confused with the “advanced unlocking services” they’ve marketed for years. A press release from earlier this year confirms AU is a new product for 2026. […] According to Cellebrite, AU: is a “next-generation AFU v

Schneier on Security
CRITICALZero Day

Authentication Bypass, Remote Code Execution, and Database Read in Eptura Archibus (FIXED)

Overview While performing continuous red teaming exercises through Rapid7’s Vector Command service, Rapid7 discovered three new vulnerabilities in Eptura Archibus . A legacy API endpoint could be exploited to bypass authentication and run various functions without authentication ( CVSS: 8.6 High ). The most serious functions allow for full database read ( CVSS: 8.5 High ) and an insecure file uplo

CVE-2026-107186CVE-2026-107187
Rapid7