{
  "crds_version": "0.1",
  "kind": "base",
  "id": "crds:cve-2026-0322",
  "revision": 1,
  "title": "Palo Alto PAN-OS — Management Interface Code Injection",
  "summary": "A code injection flaw in the management interface of Palo Alto Networks firewall software lets an authenticated attacker with network access gain RCE as root on the firewall and on Panorama. Prisma Access is not affected.",
  "source_type": "cve",
  "severity": "high",
  "cvss": {
    "score": 7.2,
    "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
    "version": "3.1"
  },
  "epss": 0.0174,
  "exploitation": {
    "known_exploited": true,
    "exploit_available": false,
    "attack_complexity": "low",
    "kev_added": "2026-10-14",
    "kev_due": "2026-10-17",
    "prerequisites": "An authenticated account and network access to the management interface."
  },
  "mitre_attack": [
    "T1059"
  ],
  "kill_chain": "execution",
  "recommended_action": "Restrict the management interface to trusted internal addresses and follow the Palo Alto Networks advisory for CVE-2026-0322.",
  "confidence": "high",
  "provenance": [
    {
      "fields": [
        "cvss",
        "exploitation.attack_complexity",
        "exploitation.exploit_available",
        "published_at",
        "references"
      ],
      "source": "https://nvd.nist.gov/vuln/detail/CVE-2026-0322",
      "retrieved_at": "2026-11-05T07:48:47.009Z",
      "confidence": "high",
      "extractor": "scrty-crds-pipeline/0.1"
    },
    {
      "fields": [
        "exploitation.known_exploited",
        "exploitation.kev_added",
        "exploitation.kev_due"
      ],
      "source": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "retrieved_at": "2026-11-05T07:48:47.009Z",
      "confidence": "high",
      "extractor": "scrty-crds-pipeline/0.1"
    },
    {
      "fields": [
        "epss"
      ],
      "source": "https://api.first.org/data/v1/epss?cve=CVE-2026-0322",
      "retrieved_at": "2026-11-05T07:48:47.009Z",
      "confidence": "high",
      "extractor": "scrty-crds-pipeline/0.1"
    },
    {
      "fields": [
        "title",
        "subtitle",
        "summary",
        "severity",
        "remediation",
        "mitre_attack",
        "kill_chain",
        "recommended_action",
        "confidence",
        "tags",
        "exploitation.prerequisites"
      ],
      "source": "https://nvd.nist.gov/vuln/detail/CVE-2026-0322",
      "retrieved_at": "2026-11-05T07:48:47.009Z",
      "confidence": "high",
      "extractor": "claude-code"
    }
  ],
  "references": [
    {
      "type": "cve",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0322",
      "label": "NVD record"
    },
    {
      "type": "cisa",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "label": "CISA Known Exploited Vulnerabilities catalog"
    },
    {
      "type": "vendor_advisory",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0322"
    }
  ],
  "published_at": "2026-10-14T18:17:07.743Z",
  "issued_at": "2026-11-05T07:48:47.009Z",
  "tags": [
    "palo-alto",
    "pan-os",
    "code-injection"
  ]
}