CVE-2026-0322: what one valid credential still buys on a PAN-OS management interface

A root RCE that needs one valid login, and two severity scores on the same record.

October 17, 2026 · 6 min · Caleb