PAN-OS

Reported Context (41)

that no special configuration is required to be affected by this issue, adding the risk is highest on PAN-OS when access to the management interface is allowed from external IP addresses on the internet. Attackers Exploit PHP2Shell Flaws Against Internet-Exposed Palo Alto Management Interfaces
🐘 Blue October, in perspective: Palo Alto confirms PHP2Shell exploitation of exposed PAN-OS management interfaces and the Brotli bug joins KEV. Blue October Roundup, Upwind’s $400M Raise and AI Audit-Trail Book Launch
PAN-OS Global Protect LevelBlue Q3 Briefing: Trusted Access Fueled Data Theft
Microsoft, the maintainers of two Python packages, Bun, Envoy and Istio have also released fixes, and Palo Alto Networks is rolling out hotfixes for PAN-OS. CISA Adds Node2Shell Brotli Flaw to KEV as Honeypots Record Exploitation Attempts
PAN-OS management interface: Palo Alto Networks reported exploitation of CVE-2026-0322 in attacks on firewalls, allowing an authenticated administrator with network access to execute code as root. InfraTrust Report Warns of Exploited Flaws in Critical Network Infrastructure

CVE (214)

Malware (57)

People (35)

Threat Actors (71)

MITRE ATT&CK (79)

Vendors (117)

Products (272)

Tools (61)

Industries (35)

Countries (39)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.