Palo Alto Networks has announced the release of critical patches addressing a zero-day vulnerability in its PAN-OS software, which has been actively exploited in targeted attacks. Labeled as CVE-2026-0322, this high-severity flaw enables remote code execution on the management interface of PAN-OS. The vulnerability can be exploited by an authenticated attacker with network access to execute arbitrary code with root privileges on affected firewalls. This issue impacts the PAN-OS software running on PA-Series and VM-Series firewalls as well as Panorama. No special configuration is required to exploit the vulnerability, making it a pressing concern for network administrators. The company has detected limited exploitation activity targeting these systems and has released indicators of compromise to help organizations identify potential breaches, including specific IP addresses related to the attacks. While details about the attacks or the threat actors involved have not been disclosed, the Cybersecurity and Infrastructure Security Agency (CISA) has added this vulnerability to its Known Exploited Vulnerabilities catalog, mandating federal agencies to address it by October 17. Alongside the patch for this critical flaw, Palo Alto Networks has published several other advisories detailing vulnerabilities in PAN-OS, GlobalProtect, and Prisma Cloud products, which range from medium to low severity. These advisories address multiple issues such as DoS, command injection, identity hijacking, local privilege escalation, XSS, and path traversal vulnerabilities. Additionally, the company has updated its Prisma Browser with the latest Chromium updates to enhance security.