Palo Alto Networks PAN-OS Code Injection Vulnerability

CVE-2026-0322 is a code injection vulnerability affecting Palo Alto Networks PAN-OS. An authenticated attacker with network access can exploit this vulnerability to execute arbitrary code with root privileges on the affected firewall. The vulnerability is tracked by CISA and listed under BOD 26-04, which prioritizes security updates based on risk. CISA provides forensics triage requirements as part of the implementation guidance for this directive. The vulnerability is also documented in the NVD and Palo Alto Networks' own security advisory portal. The high criticality rating reflects the severity of potential root-level code execution on network security devices.