Palo Alto Networks security advisory (AV26-1041) - Update 1

As of October 14, 2026, Palo Alto Networks is affected by vulnerabilities in the following products:

• PAN-OS 12.2
  • Prior to 12.2.4
• PAN-OS 12.1
  • Prior to 12.1.4-h12
  • Prior to 12.1.7-h8
  • Prior to 12.1.10-h2
• PAN-OS 11.2
  • Prior to 11.2.4-h22
  • Prior to 11.2.7-h21
  • Prior to 11.2.10-h15
  • Prior to 11.2.13-h3
• PAN-OS 11.1
  • Multiple versions
• PAN-OS 10.2
  • Multiple versions
• Prisma Browser
  • Prior to 152.8.5.83

Update 1

On October 14, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-0322 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• CVE-2026-0322 PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface
• PAN-SA-2026-0013 Chromium: Monthly Vulnerability Update (October 2026)
• Palo Alto Networks Security Advisories
• CISA KEV: CVE-2026-0322