Palo Alto Networks says attackers are already using a new flaw in the software that runs its firewalls. The bug, CVE-2026-0322, lets someone who can reach a firewall's management page and log in as an administrator run their own code on the device with root privileges, the highest level of control there is.

Photo: Namaste jinx / Wikimedia Commons (CC BY-SA 4.0), cropped