{"metadata": {"vulnerability": "CVE-2026-0322", "count": 107, "kinds": {"milestone": 6, "sighting": 76, "kev": 11, "other": 14}}, "data": [{"timestamp": "2025-11-03T20:46:23.966Z", "date_only": false, "value": "2025-11-03T20:46:23.966Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-0322", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2026-0322", "field": "timestamps.asserted_at", "uuid": "029817d3-1c77-4d2b-9d76-3a75b5a7aea8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": true, "value": "2026-10-14", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-0322", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": true, "value": "2026-10-14", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2026-0322", "field": "evidence.0.details.date_added", "uuid": "029817d3-1c77-4d2b-9d76-3a75b5a7aea8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2026-0322", "field": "timestamps.first_seen_at", "uuid": "029817d3-1c77-4d2b-9d76-3a75b5a7aea8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": true, "value": "2026-10-14", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1326", "record": "CERTFR-2026-AVI-1326", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-0322", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-0322", "record": "FKIE_CVE-2026-0322", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2026-0322", "field": "status.status_updated_at", "uuid": "029817d3-1c77-4d2b-9d76-3a75b5a7aea8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-0322", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2026-10-14T12:08:03Z", "date_only": false, "value": "2026-10-14T12:08:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/palo-alto-networks-security-advisory-av26-1041", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "93141a8e-b23f-4984-a4b8-65b0e9475005", "url": "https://cyber.gc.ca/en/alerts-advisories/palo-alto-networks-security-advisory-av26-1041"}, {"timestamp": "2026-10-14T16:00:00Z", "date_only": false, "value": "2026-10-14T16:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / palo_alto", "record": "CVE-2026-0322", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-14T16:00:00Z", "date_only": false, "value": "2026-10-14T16:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / palo_alto", "record": "CVE-2026-0322", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-10-14T16:29:54.539Z", "date_only": false, "value": "2026-10-14T16:29:54.539444Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/117440210059394899", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "44fcaa92-fe96-4598-9c98-1de3deddcf94", "content": "CVE-2026-0322 is an EITW post-auth RCE in PAN-OS management interface.\nhttps://security.paloaltonetworks.com/CVE-2026-0322", "url": "https://infosec.exchange/users/cR0w/statuses/117440210059394899"}, {"timestamp": "2026-10-14T16:31:55.090Z", "date_only": false, "value": "2026-10-14T16:31:55.090851Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxtxw2ko6g2y", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "7fcf98cd-5952-4e38-a1c9-078d470881cd", "content": "Attackers are actively exploiting CVE-2026-0322, a high-severity Palo Alto PAN-OS RCE vulnerability in the management interface. Apply patches right now.\n\n#CVE20260322 #PaloAltoNetworks #PANOS #RCE #FirewallSecurity #Cybersecurity #InfoSec", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mxtxw2ko6g2y"}, {"timestamp": "2026-10-14T17:17:19.515Z", "date_only": false, "value": "2026-10-14T17:17:19.515213Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mxu2hbe36n2h", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "30a0f9bf-52ea-4f56-b593-f302fd35056a", "content": "Palo Alto PAN-OS CVE-2026-0322 CVSS 8.6 authenticated RCE in the management interface is being exploited in limited attacks \u2014 patch to 12.2.4+ and lock down mgmt access. https://cti.securitycyber.uk", "url": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mxu2hbe36n2h"}, {"timestamp": "2026-10-14T17:26:52.448Z", "date_only": false, "value": "2026-10-14T17:26:52.448Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-0322", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T17:26:52.448Z", "date_only": false, "value": "2026-10-14T17:26:52.448Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / palo_alto", "record": "CVE-2026-0322", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T18:17:07Z", "date_only": false, "value": "2026-10-14T18:17:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9FH3-97MP-7WMV", "record": "GHSA-9FH3-97MP-7WMV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-14T18:17:07.743Z", "date_only": false, "value": "2026-10-14T18:17:07.743", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-0322", "record": "FKIE_CVE-2026-0322", "field": "published"}, {"timestamp": "2026-10-14T18:32:28Z", "date_only": false, "value": "2026-10-14T18:32:28Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9FH3-97MP-7WMV", "record": "GHSA-9FH3-97MP-7WMV", "field": "published"}, {"timestamp": "2026-10-14T19:03:18.922Z", "date_only": false, "value": "2026-10-14T19:03:18.922185Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3mxuaes4z2h2c", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "5d9321c6-6d43-4ef7-a9ef-30667fcaa559", "content": "Paloalto\u306e\u8106\u5f31\u6027\u60c5\u5831 \u300cCVE-2026-0322 PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface (Severity: HIGH)\u300d\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\u3002\n\u2192 https://security.paloaltonetworks.com/CVE-2026-0322", "url": "https://bsky.app/profile/ripjyr.bsky.social/post/3mxuaes4z2h2c"}, {"timestamp": "2026-10-14T19:31:03Z", "date_only": false, "value": "2026-10-14T19:31:03+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-0322", "field": "timestamps.asserted_at", "uuid": "40d2e2f7-ac17-4396-8813-5c3c81b83e5d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-14T19:31:03Z", "date_only": false, "value": "2026-10-14T19:31:03+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2026-0322", "field": "timestamps.first_seen_at", "uuid": "40d2e2f7-ac17-4396-8813-5c3c81b83e5d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-14T19:31:03Z", "date_only": false, "value": "2026-10-14T19:31:03+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2026-0322", "field": "status.status_updated_at", "uuid": "40d2e2f7-ac17-4396-8813-5c3c81b83e5d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-14T19:31:03.313Z", "date_only": false, "value": "2026-10-14T19:31:03.313Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2026-0322", "field": "evidence.0.details.added_date", "uuid": "40d2e2f7-ac17-4396-8813-5c3c81b83e5d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-14T19:57:34.367Z", "date_only": false, "value": "2026-10-14T19:57:34.367665Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mxudfsmk5424", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "6b2c4a12-c5d9-43f9-aa4b-522a5c4c77df", "content": "\ud83d\uded1 CVE-2026-0322\nPalo Alto Networks PAN-OS\nCVSS 8.6 / KEV: No\nTL;DR: A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks\u2026\nhttps://cvesentinel.com/report/CVE-2026-0322?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "url": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mxudfsmk5424"}, {"timestamp": "2026-10-14T20:00:00Z", "date_only": false, "value": "2026-10-14T20:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20261015", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "98fd73ad-0874-4169-9f77-81b0939c45c4", "url": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20261015"}, {"timestamp": "2026-10-14T20:00:00Z", "date_only": false, "value": "2026-10-14T20:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/palo-alto-products-multiple-vulnerabilities_20261015", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "b3cffef2-daf0-474a-9bcd-f95107e214cc", "url": "https://www.hkcert.org/security-bulletin/palo-alto-products-multiple-vulnerabilities_20261015"}, {"timestamp": "2026-10-14T20:00:02Z", "date_only": false, "value": "2026-10-14T20:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2026-0322", "field": "timestamps.recorded_at", "uuid": "029817d3-1c77-4d2b-9d76-3a75b5a7aea8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-14T20:00:02.994Z", "date_only": false, "value": "2026-10-14T20:00:02.994862Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/029817d3-1c77-4d2b-9d76-3a75b5a7aea8", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "b2bce15d-0c7d-460e-b0d5-855af107f949", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/029817d3-1c77-4d2b-9d76-3a75b5a7aea8"}, {"timestamp": "2026-10-14T20:36:37.314Z", "date_only": false, "value": "2026-10-14T20:36:37.314948Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117441147741268577", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "098f1adf-ee85-4040-bd4b-af15f4b50952", "content": "Palo Alto Networks zero-day: CVE-2026-0322 (CVSS4: 8.6 high)PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface\n\nVery limited exploitation has been observed targeting the Palo Alto Networks management interface.\nCISA added this to the KEV Catalog today: https://www.cisa.gov/news-events/alerts/2026/10/14/cisa-adds-four-known-exploited-vulnerabilities-catalog\n#paloaltonetworks #zeroday #KEV #CISA #eitw", "url": "https://infosec.exchange/ap/users/117202824925377048/statuses/117441147741268577"}, {"timestamp": "2026-10-14T20:59:32.583Z", "date_only": false, "value": "2026-10-14T20:59:32.583401Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/ap/users/115741367687413652/statuses/117441268175408990", "record": "cve-2026-0322", "field": "creation_timestamp", "uuid": "eb729dc4-7a09-49a4-93e3-c9d75ee656ba", "content": "If your Palo Alto management interface is internet-exposed, you might notice even more traffic on it today. But if that was your security posture, maybe you're fine with that.\nAnyway this is exploited in the wild. Authenticated, so creds required.\nhttps://ifin.network/t/cve-2026-0322-authenticated-rce-in-pan-os/903\n#ThreatIntel #ThreatIntelligence #IFIN", "url": "https://infosec.exchange/ap/users/115741367687413652/statuses/117441268175408990"}, {"timestamp": "2026-10-14T21:20:05.951Z", "date_only": false, "value": "2026-10-14T21:20:05.951060Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aipostdaily.bsky.social/post/3mxuhzdak6l2e", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "7bd02f90-e0d3-47ff-a742-412055ff0f34", "content": "CISA added CVE-2026-0322 to its Known Exploited Vulnerabilities list (2026-10-14).\nPalo Alto Networks PAN-OS Code Injection\n#infosec #KEV", "url": "https://bsky.app/profile/aipostdaily.bsky.social/post/3mxuhzdak6l2e"}, {"timestamp": "2026-10-14T22:15:34.797Z", "date_only": false, "value": "2026-10-14T22:15:34.797036Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ninjaintelgroup.bsky.social/post/3mxul4lrcgw2p", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "dcecfb8b-7633-4a75-952b-b09bc7e97c5d", "content": "\ud83d\udea8 NEW on CISA KEV \u2014 exploited in the wild\nPalo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Code Injection Vulnerability\nCVE-2026-0322 \u00b7 patch by 2026-10-17\n\ud83d\udd17 https://ninjasignal.ninja/intel/cve/CVE-2026-0322\n#KEV #cybersecurity #infosec", "url": "https://bsky.app/profile/ninjaintelgroup.bsky.social/post/3mxul4lrcgw2p"}, {"timestamp": "2026-10-14T22:57:07.210Z", "date_only": false, "value": "2026-10-14T22:57:07.210152Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mxunguereg2m", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "21e8ff48-96dc-4ae9-ae56-a02837724936", "content": "Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls.", "url": "https://bsky.app/profile/bleepingcomputer.com/post/3mxunguereg2m"}, {"timestamp": "2026-10-14T22:58:29.907Z", "date_only": false, "value": "2026-10-14T22:58:29.907170Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxunjdgvmo2q", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "f5964f2e-39fa-49cf-83a8-1c5fbeffcbc3", "content": "\ud83e\udd16 CVE-2026-0322 (CVSS 8.6): RCE as root in the PAN-OS management interface, exploited in the wild vs PA-Series/VM-Series firewalls + Panorama. Needs existing creds + management access. Added to CISA KEV (deadline Oct 17).\nhttps://security.paloaltonetworks.com/CVE-2026-0322", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mxunjdgvmo2q"}, {"timestamp": "2026-10-14T23:03:47.452Z", "date_only": false, "value": "2026-10-14T23:03:47.452618Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxunss7v2u26", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "448806d0-0fa2-4828-90ff-d50f10e25bdb", "content": "Palo Alto Networks\u3001\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u305fPAN-OS\u306eRCE\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\u8b66\u544a\n\nPalo Alto Networks\u306f\u3001\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u3092\u72d9\u3063\u305f\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3001\u91cd\u5927\u5ea6\u300c\u9ad8\u300d\u306ePAN-OS\u306e\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08RCE\uff09\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\uff08CVE-2026-0322\uff09\u306b\u5bfe\u3059\u308b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u307e\u3057\u305f\u3002 \u3053\u306e\u8106\u5f31\u6027\u306fPAN-OS\u306e\u7ba1\u7406\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u306b\u5b58\u5728\u3057\u307e\u3059\u3002\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30a2\u30af\u30bb\u30b9\u6a29", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxunss7v2u26"}, {"timestamp": "2026-10-14T23:08:11.725Z", "date_only": false, "value": "2026-10-14T23:08:11.725275Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117441776191676134", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "3f2221d0-f25a-474d-a10e-96c9694ff09f", "content": "CVE-2026-0322 PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS\u00ae software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.\nThe security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .\nThis issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).\nCloud NGFW and Prisma\u00ae Access are not impacted by this vulnerability.\nhttps://www.cve.org/CVERecord?id=CVE-2026-0322https://security.paloaltonetworks.com/CVE-2026-0322#paloaltonetworks #PaloAltoNetworks #CloudNGFW #PAN-OS #PrismaAccess#CVE_2026_0322#bot", "url": "https://infosec.exchange/users/cve/statuses/117441776191676134"}, {"timestamp": "2026-10-14T23:33:38.654Z", "date_only": false, "value": "2026-10-14T23:33:38.654283Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117441844887335985", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "3c611cb1-555f-4473-a69e-eeafed60aed4", "content": "I forgot to mention that Palo Alto listed these IOC for CVE-2026-0322 exploitation:\n\n66.42.72.14\n208.83.239.114\n149.248.47.234\nFanged for your pleasure. No open source information on them Vultr IPs outside of today's disclosure. \n#threatintel #paloaltonetworks #zeroday #IOC #KEV", "url": "https://infosec.exchange/ap/users/117202824925377048/statuses/117441844887335985"}, {"timestamp": "2026-10-14T23:49:16.372Z", "date_only": false, "value": "2026-10-14T23:49:16.372809Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mxuqe2dnk22m", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "d363bbbd-778e-4f4b-8edb-daf3fb9e327b", "content": "Palo Alto Networks\u300cPAN-OS\u300d\u306broot\u6a29\u9650\u3067\u30b3\u30fc\u30c9\u5b9f\u884c\u3055\u308c\u308b\u8106\u5f31\u6027\u3001\u30b5\u30a4\u30d0\u30fc\u653b\u6483\u3067\u60aa\u7528\u78ba\u8a8d\u2015CVE-2026-0322 \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mxuqe2dnk22m"}, {"timestamp": "2026-10-14T23:50:07.654Z", "date_only": false, "value": "2026-10-14T23:50:07.654759Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybernewsph.com/post/3mxuqfmznsx2p", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "4da7ee7b-176b-4fe8-b35f-9beb2db1056b", "content": "Palo Alto Networks released security updates for CVE-2026-0322, targeting firewalls, BleepingComputer reports.\n\n#cybersecurity", "url": "https://bsky.app/profile/cybernewsph.com/post/3mxuqfmznsx2p"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1326", "record": "CERTFR-2026-AVI-1326", "field": "last_revision_date"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1326", "record": "CERTFR-2026-AVI-1326", "field": "initial_release_date"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1326", "record": "CERTFR-2026-AVI-1326", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-15T00:00:14.877Z", "date_only": false, "value": "2026-10-15T00:00:14.877491Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/windowsforum.com/post/3mxuqxqd7xu2g", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "342515c8-26bc-41d2-bfd3-33866a368ff1", "content": "Patch PAN-OS CVE-2026-0322: exploited RCE. Teams QR phishing gets ZAP; notes move to organizer OneDrive Nov 2026. Copilot memory: view/delete inputs; Notebooks agent 516041 canceled. Tea Shirt: whoosh\u2019s art. +25 more stories", "url": "https://bsky.app/profile/windowsforum.com/post/3mxuqxqd7xu2g"}, {"timestamp": "2026-10-15T00:06:20.651Z", "date_only": false, "value": "2026-10-15T00:06:20.651011Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mxurcmyg7i2i", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "34020b22-76af-48bc-8311-743e92a69e01", "content": "Palo Alto Networks patched CVE-2026-0322, an exploited PAN-OS management interface RCE, per BleepingComputer. CVSS 8.6, needs credentials, limited attacks seen. CISA added it to KEV, deadline October 17. bleepingcomputer.com/news/security/palo-alto-networks-warns-of-pan-os-rce-flaw...", "url": "https://bsky.app/profile/entorisec.bsky.social/post/3mxurcmyg7i2i"}, {"timestamp": "2026-10-15T00:08:55.743Z", "date_only": false, "value": "2026-10-15T00:08:55.743418Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mxurhb3sbv26", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "aacfd265-82aa-4a22-b08d-565a37cd2ca0", "content": "Palo Alto Networks: Active Exploit for CVE-2026-0322 in PAN-OS Management", "url": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mxurhb3sbv26"}, {"timestamp": "2026-10-15T00:12:14.375Z", "date_only": false, "value": "2026-10-15T00:12:14.375510Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/campuscodi.risky.biz/post/3mxurn53wzc2y", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "a976b546-096f-4405-b6f7-943726e2d0c3", "content": "And a Palo Alto Networks zero-day too\n\nsecurity.paloaltonetworks.com/CVE-2026-0322", "url": "https://bsky.app/profile/campuscodi.risky.biz/post/3mxurn53wzc2y"}, {"timestamp": "2026-10-15T00:52:28Z", "date_only": false, "value": "2026-10-15T00:52:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/palo-alto-networks-rilevato-sfruttamento-in-rete-della-cve-2026-0322-relativa-a-pan-os", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "7af152e6-c929-4c09-96c2-d6c481f8a395", "url": "https://www.acn.gov.it/portale/w/palo-alto-networks-rilevato-sfruttamento-in-rete-della-cve-2026-0322-relativa-a-pan-os"}, {"timestamp": "2026-10-15T03:53:24.403Z", "date_only": false, "value": "2026-10-15T03:53:24.403499Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mxv5ynemix2p", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "e0a6e68b-17f0-4dbe-b906-28d3da671ce0", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-0322: A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS\u00ae software enables an authen\u2026\nCVSS 8.6 \u00b7 CISA KEV \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2026-0322\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3mxv5ynemix2p"}, {"timestamp": "2026-10-15T03:57:17.169Z", "date_only": false, "value": "2026-10-15T03:57:17.169Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-0322", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T03:57:17.169Z", "date_only": false, "value": "2026-10-15T03:57:17.169Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-0322", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T04:00:44.854Z", "date_only": false, "value": "2026-10-15T04:00:44.854731Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mxv6frrig62l", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "e8c640b7-5506-4895-a4ee-aeb16b7a4665", "content": "Ontdekking van kritieke kwetsbaarheid in Palo Alto Networks firewalls vereist on\n\nEen ernstige kwetsbaarheid, aangeduid als CVE-2026-0322, is ontdekt in PAN-OS, het besturingssysteem dat gebruikt wordt door Palo Alto Networks firewalls. Deze code-injectiekwetsbaarheid (CWE-94) stelt aanvalle...", "url": "https://bsky.app/profile/newsfacts.bsky.social/post/3mxv6frrig62l"}, {"timestamp": "2026-10-15T04:00:57.155Z", "date_only": false, "value": "2026-10-15T04:00:57.155522Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mxv6g5cg7t2o", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "953add34-18aa-4779-b588-fb6836896849", "content": "~Cisa~\nCISA added four actively exploited flaws to its KEV Catalog, urging rapid remediation.\n-\nIOCs: CVE-2026-0322, CVE-2026-76519, CVE-2026-105133\n-\n#CVE #KEV #ThreatIntel", "url": "https://bsky.app/profile/cyfar.ca/post/3mxv6g5cg7t2o"}, {"timestamp": "2026-10-15T05:38:49.689Z", "date_only": false, "value": "2026-10-15T05:38:49.689711Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxvdv6bpyg22", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "693e073c-a867-454e-8ad1-ea892e537935", "content": "Palo Alto PAN-OS \u306e\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u3092\u60aa\u7528\u3001root\u6a29\u9650\u3067\u306e\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u306b\n\nPalo Alto Networks\u306f\u3001PAN-OS\u306e\u7ba1\u7406\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u306b\u3001\u3059\u3067\u306b\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u308b\u8106\u5f31\u6027\u304c\u5b58\u5728\u3059\u308b\u3053\u3068\u3092\u516c\u8868\u3057\u307e\u3057\u305f\u3002\u8a8d\u8a3c\u6e08\u307f\u306e\u653b\u6483\u8005\u304c\u3001root\u6a29\u9650\u3067\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u304a\u305d\u308c\u304c\u3042\u308a\u307e\u3059\u3002 \u3053\u306e\u8106\u5f31\u6027\u306f\u300cCVE-2026-0322\u300d\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u304a\u308a\u3001CVSS 4.0\u306e\u30b9\u30b3\u30a2\u306f8.6\u3001\u5bfe", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxvdv6bpyg22"}, {"timestamp": "2026-10-15T05:55:56.768Z", "date_only": false, "value": "2026-10-15T05:55:56.768646Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mxvetrojmh2l", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "d225d4a0-48c5-4820-92d7-019f8194e84c", "content": "\ud83d\udd25 Palo Alto PAN-OS (CVE-2026-0322) et Cisco Secure Email Gateway : 0-days exploit\u00e9s, RCE root sans authentification. \u00c0 patcher en urgence. https://www.bleepingcomputer.com/news/security/palo-alto-networks-warns-of-pan-os-rce-flaw-exploited-in-attacks/", "url": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mxvetrojmh2l"}, {"timestamp": "2026-10-15T06:01:23.087Z", "date_only": false, "value": "2026-10-15T06:01:23.087346Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/raven-sec.bsky.social/post/3mxvf5fb2wipz", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "a51bc467-bc9e-4766-802f-12d37f388613", "content": "Active exploits: Cisco RCE, Palo Alto firewall breach, Claude credential theft\n\n\u2022 Cisco Secure Email Gateway zero-day RCE exploited now\n\u2022 PAN-OS CVE-2026-0322 under active attack\n\n5 sources verified \u00b7 hackingallthethings.com\n#infosec #threatintel #cybersecurity #ZeroDay #PatchNow", "url": "https://bsky.app/profile/raven-sec.bsky.social/post/3mxvf5fb2wipz"}, {"timestamp": "2026-10-15T06:54:32.697Z", "date_only": false, "value": "2026-10-15T06:54:32.697673Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxvi4kc56p2j", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "2c2fb79f-c681-4786-92d6-09028e9ea5a5", "content": "CVE-2026-0322 is a high-severity PAN-OS management-interface RCE flaw enabling authenticated attackers to execute arbitrary root code on affected firewalls.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxvi4kc56p2j"}, {"timestamp": "2026-10-15T06:55:25.242Z", "date_only": false, "value": "2026-10-15T06:55:25.242567Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mxvi64n3bo2g", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "bd9e7389-f4bb-493f-af22-8f0a756f14fb", "content": "CVE-2026-0322 is a high-severity PAN-OS management-interface RCE flaw enabling authenticated attackers to execute arbitrary root code on affected firewalls.\n", "url": "https://bsky.app/profile/privpros.bsky.social/post/3mxvi64n3bo2g"}, {"timestamp": "2026-10-15T07:07:19.256Z", "date_only": false, "value": "2026-10-15T07:07:19.256632Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxvitgau4x2l", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "bbbe7841-9d9a-43cb-87f7-41ba372080c2", "content": "\ud83e\udd16 CVE-2026-0322 (CVSS 8.6): authenticated RCE in the PAN-OS management interface \u2192 root on the firewall. Patched, exploited in the wild, added to CISA KEV. Keep management access off the internet.\nhttps://security.paloaltonetworks.com/CVE-2026-0322", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mxvitgau4x2l"}, {"timestamp": "2026-10-15T07:12:27.788Z", "date_only": false, "value": "2026-10-15T07:12:27.788285Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxvj4lmxxa2g", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "49145b8d-23ed-4a83-8675-f36b588a960d", "content": "CVE-2026-0322 in PAN-OS enables remote code execution via the management interface and requires patches for affected Palo Alto Networks firewalls.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxvj4lmxxa2g"}, {"timestamp": "2026-10-15T08:37:31.755Z", "date_only": false, "value": "2026-10-15T08:37:31.755013Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3mxvnunvpruvv", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "0ef74eaf-5944-4f11-ad72-f833de7ca9f2", "content": "CISA KEV | CVE-2026-0322 | Palo Alto Networks / PAN-OS\n\nCISA lists this vulnerability as exploited in the wild. Check affected products and vendor guidance.\n\nSource: CISA KEV\n\nFull analysis: https://t.me/aiutocomputerhelp_lab/1273", "url": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3mxvnunvpruvv"}, {"timestamp": "2026-10-15T08:59:39.781Z", "date_only": false, "value": "2026-10-15T08:59:39.781075Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/117444102022047181", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "f97c67a0-3bf7-4de8-985f-94c19ac25db5", "content": "Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks\nPalo Alto Networks has released security updates for a high-severity PAN-OS remote code execution zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls. Customers are advised to apply the updates. https://www.bleepingcomputer.com/news/security/palo-alto-networks-warns-of-pan-os-rce-flaw-exploited-in-attacks/", "url": "https://infosec.exchange/users/edwardk/statuses/117444102022047181"}, {"timestamp": "2026-10-15T08:59:41.435Z", "date_only": false, "value": "2026-10-15T08:59:41.435955Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mxvp4db2wc2w", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "f84b378f-81cf-43ca-adaf-b10d2cd1945c", "content": "Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks\n\nPalo Alto Networks has released security updates for a high-severity PAN-OS remote code execution zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls. Customers are advised to apply the updates.", "url": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mxvp4db2wc2w"}, {"timestamp": "2026-10-15T09:48:32.880Z", "date_only": false, "value": "2026-10-15T09:48:32.880321Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mxvrtp4f2q2y", "record": "cve-2026-0322", "field": "creation_timestamp", "uuid": "a296495b-4397-4eb8-a1cc-9b6140d08175", "content": "\ud83d\udcf0 Palo Alto Networks Peringatkan Celah Keamanan RCE PAN-OS yang Dieksploitasi dalam Serangan\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/10/15/palo-alto-networks-peringatkan-celah-rce-pan-os-cve-2026-0322/\n\n#cisa #cyberSecurity #exploit #firewall #hacker #keamananSiber #kerenta", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mxvrtp4f2q2y"}, {"timestamp": "2026-10-15T11:01:08.739Z", "date_only": false, "value": "2026-10-15T11:01:08.739107Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/dragonjar/statuses/117444579705555605", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "8081ce8d-9faf-46ca-8cf7-4185100dc758", "content": "En las \u00faltimas 24 horas, destacan avances en reconocimiento de voz con Grok Voice 3.0, nuevas amenazas como \"lombrices\" de IA que comprometen dispositivos dom\u00e9sticos, explotaci\u00f3n cr\u00edtica en Chrome creada con IA y vulnerabilidades activas en firewalls PAN-OS; mientras comunidades liberan datos de Cobalt Strike y Vercel refuerza su programa de recompensas tras detectar un zero-day en Linux. Descubre estos y m\u00e1s detalles en el siguiente listado de noticias sobre seguridad inform\u00e1tica:\n\ud83d\uddde\ufe0f \u00daLTIMAS NOTICIAS EN SEGURIDAD INFORM\u00c1TICA \ud83d\udd12====| \ud83d\udd25 LO QUE DEBES SABER HOY \ufeff\ufeff15/10/26\ufeff\ufeff  \ud83d\udcc6 |==== \n\ud83d\ude80 PRESENTACI\u00d3N DE GROK VOICE 3.0: EL MODELO DE RECONOCIMIENTO DE VOZ M\u00c1S INTELIGENTE\nGrok Voice 3.0 revoluciona la atenci\u00f3n al cliente con un sistema de reconocimiento de voz capaz de resolver llamadas en menos de un segundo. Adem\u00e1s, su dise\u00f1o eficiente reduce considerablemente los costos frente a otros modelos l\u00edderes, marcando un avance significativo para empresas que buscan mejorar la experiencia del usuario y la operatividad. Descubre c\u00f3mo esta innovaci\u00f3n puede transformar los servicios de voz en tu negocio. M\u00e1s detalles aqu\u00ed \ud83d\udc49 https://djar.co/J3NWb\n\ud83e\udeb1 SE\u00d1ALES DE VIDA PARA \u201cLOMBRICES\u201d DE IA EN DISPOSITIVOS DOM\u00c9STICOS\nAnthropic ha identificado indicios preocupantes: \u201clombrices de IA\u201d que podr\u00edan colonizar dispositivos dom\u00e9sticos, vulnerando la seguridad de nuestros hogares conectados. Esta investigaci\u00f3n abre un debate crucial sobre las amenazas emergentes en el internet de las cosas y la necesidad de fortalecer las defensas frente a c\u00f3digos inteligentes que se propagan de manera aut\u00f3noma. Inf\u00f3rmate sobre estos riesgos y recomendaciones para proteger tus dispositivos. Lee m\u00e1s aqu\u00ed \ud83d\udc49 https://djar.co/Y6yFm\n\ud83d\udcbb CADENA DE EXPLOTACI\u00d3N EN CHROME DESARROLLADA CON IA VALORADA EN 250,000 D\u00d3LARES\nXBOW ha utilizado un modelo abierto de OpenAI para construir en apenas seis d\u00edas una cadena completa de exploits en el navegador Chrome que facilita la ejecuci\u00f3n remota de c\u00f3digo en sistemas Windows. Esta haza\u00f1a resalta tanto el poder de las herramientas de IA para la seguridad ofensiva como la importancia cr\u00edtica de mantener los sistemas actualizados. Google ya ha corregido las tres vulnerabilidades relacionadas. Conoce los detalles t\u00e9cnicos y c\u00f3mo protegerte aqu\u00ed \ud83d\udc49 https://djar.co/buCU\n\ud83d\udd25 ALERTA DE VULNERABILIDAD RCE EN PAN-OS EXPLORADA EN ATAQUES REALES\nPalo Alto Networks ha emitido parches urgentes para una vulnerabilidad de ejecuci\u00f3n remota de c\u00f3digo (CVE-2026-0322) detectada en su sistema operativo PAN-OS, utilizada activamente en campa\u00f1as dirigidas contra firewalls. Esta amenaza de alta gravedad exige revisi\u00f3n inmediata para evitar compromisos cr\u00edticos en la infraestructura. Descubre c\u00f3mo actualizar tu sistema y mitigar este riesgo ahora mismo. M\u00e1s informaci\u00f3n aqu\u00ed \ud83d\udc49 https://djar.co/VXdS\n\ud83d\udcca LIBERACI\u00d3N DEL CORPUS COMPLETO DE BEACONS DE COBALT STRIKE PARA INVESTIGACI\u00d3N\nFox-IT ha puesto a disposici\u00f3n la base de datos completa con 56,843 llamadas de beacon y sus configuraciones provenientes de Cobalt Strike, una herramienta com\u00fan en ataques cibern\u00e9ticos. Esta liberaci\u00f3n masiva apoya a la comunidad de seguridad tanto en la defensa como en la ofensiva, facilitando an\u00e1lisis detallados para la detecci\u00f3n temprana y respuesta frente a campa\u00f1as maliciosas. Explora este recurso indispensable para profesionales de la ciberseguridad. Accede aqu\u00ed \ud83d\udc49 https://djar.co/z5Ph\n\ud83d\udcb0 RECOMPENSAS Y VULNERABILIDAD ZERO-DAY EN VERCEL: UN MILL\u00d3N DE D\u00d3LARES EN JUEGO\nVercel revel\u00f3 un programa de recompensas que ha pagado 242,000 d\u00f3lares tras 1,285 reportes, destacando la detecci\u00f3n de una vulnerabilidad zero-day en entornos Linux. Aunque no hay indicios de robo de datos, esta situaci\u00f3n enfatiza la importancia de la colaboraci\u00f3n entre hackers \u00e9ticos y empresas para blindar infraestructuras cr\u00edticas. Ent\u00e9rate c\u00f3mo Vercel gestiona la seguridad y el impacto de esta vulnerabilidad. M\u00e1s detalles aqu\u00ed \ud83d\udc49 https://djar.co/lU8Oh", "url": "https://infosec.exchange/users/dragonjar/statuses/117444579705555605"}, {"timestamp": "2026-10-15T11:22:36.212Z", "date_only": false, "value": "2026-10-15T11:22:36.212899Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxvx3vflgl25", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "ed62deca-c1b4-49d4-8df4-eea1c3aec1e9", "content": "CISA\u3001Palo Alto\u30fbCisco\u30fbAhsay\u88fd\u54c1\u306e\u60aa\u7528\u6e08\u307f\u8106\u5f31\u6027\u3092\u8b66\u544a\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001\u65b0\u305f\u306b4\u4ef6\u306e\u8106\u5f31\u6027\u3092\u300c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u300d\u306b\u8ffd\u52a0\u3057\u307e\u3057\u305f\u3002 CVE-2026-0322\uff1aPalo Alto Networks PAN-OS\u306e\u7ba1\u7406\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u306b\u5b58\u5728\u3059\u308b\u3001\u6df1\u523b\u5ea6\u300c\u9ad8\u300d\u306e\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxvx3vflgl25"}, {"timestamp": "2026-10-15T11:32:30.249Z", "date_only": false, "value": "2026-10-15T11:32:30.249350Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mxvxnlosqe2d", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "84a6110d-ab99-45f4-a4b9-79335b88cb11", "content": "Same story different day, as Palo Alto Networks admits their PAN-OS software is succumbing to active exploitation courtesy of an authenticated remote code execution flaw tracked as CVE-2026-0322. Unfortunate administrators relying on PAN-OS devices get to experience threat actors...\n\nRead full story", "url": "https://bsky.app/profile/cerberusit.bsky.social/post/3mxvxnlosqe2d"}, {"timestamp": "2026-10-15T12:05:01.997Z", "date_only": false, "value": "2026-10-15T12:05:01.997803Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mxvzhqlh5i23", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "e58c1692-e18f-43a9-b232-4446c16d2ef1", "content": "\ud83d\udd34 Exploitation confirm\u00e9e (CISA KEV, ajouts du 14/10) \u00b7 2\n\u2022 Palo Alto Networks PAN-OS CVE-2026-0322, CVSS 8.6\n\u2022 Cisco Secure Email Gateway CVE-2026-76519, CVSS 9.8", "url": "https://bsky.app/profile/cybowl.bsky.social/post/3mxvzhqlh5i23"}, {"timestamp": "2026-10-15T12:19:10.705Z", "date_only": false, "value": "2026-10-15T12:19:10.705271Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mxw2aytm7s23", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "0a113a35-5bc5-472f-81e5-0801f68410be", "content": "Hackers are exploiting a high-severity flaw in Palo Alto Networks PAN-OS, tracked as CVE-2026-0322, allowing authenticated attackers to execute code with root privileges on firewalls. The vulnerability affects the management interface and has a CVSS score of 8.6. Fixed versions include PAN-OS 12.2.", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3mxw2aytm7s23"}, {"timestamp": "2026-10-15T12:24:27.163Z", "date_only": false, "value": "2026-10-15T12:24:27.163275Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mxw2khnmzw2r", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "b858c461-06f7-4ddc-acfc-8ca2b54f4e67", "content": "Palo Alto Networks patched CVE-2026-0322, an authenticated remote-code-execution flaw in PAN-OS management interfaces. Limited exploitation was observed; CISA added the vulnerability to its KEV catalog.", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mxw2khnmzw2r"}, {"timestamp": "2026-10-15T12:40:48.092Z", "date_only": false, "value": "2026-10-15T12:40:48.092219Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mariogalarza.bsky.social/post/3mxw3hpub7q2p", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "c9aa5763-ea7a-45e8-b9ec-f7c43b2a2742", "content": "Your firewall is under attack: PAN-OS zero-day CVE-2026-0322 under active exploitation. RCE as root via the management interface. CISA orders mitigation by Oct 17. Patch, lock down mgmt access, hunt the IOCs. https://www.linkedin.com/feed/update/urn:li:share:7516478128555413504/", "url": "https://bsky.app/profile/mariogalarza.bsky.social/post/3mxw3hpub7q2p"}, {"timestamp": "2026-10-15T13:32:57.079Z", "date_only": false, "value": "2026-10-15T13:32:57.079257Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/threatcodex/statuses/117445176633111012", "record": "cve-2026-0322", "field": "creation_timestamp", "uuid": "ed50e91e-005f-4205-9616-97b5e88a51f3", "content": "CVE-2026-0322: Actively Exploited PAN-OS RCE Flaw Enables Root Access#CVE_2026_0322 https://socprime.com/blog/cve-2026-0322-analysis/", "url": "https://infosec.exchange/users/threatcodex/statuses/117445176633111012"}, {"timestamp": "2026-10-15T13:47:26.713Z", "date_only": false, "value": "2026-10-15T13:47:26.713", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-0322", "record": "FKIE_CVE-2026-0322", "field": "lastModified"}, {"timestamp": "2026-10-15T14:45:10.939Z", "date_only": false, "value": "2026-10-15T14:45:10.939014Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/117445460649221665", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "ccb132b6-3936-4256-a6c8-bc943e625d9e", "content": "\ud83d\udea8 Attention, elevated activities detected targeting Palo Alto Networks PAN-OS (CVE-2026-0322) https://vuldb.com/vuln/420258/cti", "url": "https://infosec.exchange/users/vuldb/statuses/117445460649221665"}, {"timestamp": "2026-10-15T14:58:59.995Z", "date_only": false, "value": "2026-10-15T14:58:59.995191Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/yogsec.bsky.social/post/3mxwd6owh5k2r", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "1bc71037-1b5d-4e1f-a663-4b9422b5a371", "content": "Palo Alto Networks Patches Actively Exploited Zero-Day\n\nPalo Alto Networks has patched CVE-2026-0322, a high-severity PAN-OS vulnerability that allows authenticated attackers to execute code. \n\nFull news: www.securityweek.com/palo-alto-ne...\n\n#CyberSecurity #ZeroDay #InfoSec #CyberNews", "url": "https://bsky.app/profile/yogsec.bsky.social/post/3mxwd6owh5k2r"}, {"timestamp": "2026-10-15T15:16:11.012Z", "date_only": false, "value": "2026-10-15T15:16:11.012854Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxwe5kp4sf26", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "8231490b-fa35-4767-80d3-9deb4ba91f25", "content": "Palo Alto\u3001PAN-OS \u306e\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u3092\u8b66\u544a\u00a0\u653b\u6483\u3067\u60aa\u7528\u3092\u78ba\u8a8d\n\nPalo Alto Networks \u306f\u3001PAN-OS \u306e\u7ba1\u7406\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u5ea6\u300c\u9ad8\u300d\u306e\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\u304c\u3001\u653b\u6483\u8005\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u8b66\u544a\u3057\u307e\u3057\u305f\u3002ExploitPrevention Tools CVE-2026-0322 \u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306b\u30a2\u30af\u30bb\u30b9\u3067\u304d\u308b\u8a8d\u8a3c\u6e08", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxwe5kp4sf26"}, {"timestamp": "2026-10-15T16:02:50.612Z", "date_only": false, "value": "2026-10-15T16:02:50.612460Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mxwgqyx2m32i", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "30519d91-2f8a-427d-8c0e-cf28c1802990", "content": "~Cybergcca~\nSix advisories cover PAN-OS KEV exploitation, Drupal critical RCE, and updates for Juniper, n8n, Chrome, and HPE.\n-\nIOCs: CVE-2026-0322, SA-CORE-2026-014\n-\n#CVE20260322 #CyberSecurity #ThreatIntel #Vulnerability", "url": "https://bsky.app/profile/cyfar.ca/post/3mxwgqyx2m32i"}, {"timestamp": "2026-10-15T17:03:34.081Z", "date_only": false, "value": "2026-10-15T17:03:34.081286Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxwk5lbjjy22", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "3294e7ce-56cc-41b1-987a-a31d722ed145", "content": "Palo Alto Networks patched the PAN-OS CVE-2026-0322 zero-day vulnerability exploited in limited attacks to achieve root code execution on firewalls.\n\n#PaloAltoNetworks #PANOS #CVE20260322 #ZeroDay #Cybersecurity", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mxwk5lbjjy22"}, {"timestamp": "2026-10-15T17:19:22.445Z", "date_only": false, "value": "2026-10-15T17:19:22.445393Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxwkztugvg2t", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "64cda6c3-88b7-492b-ab71-b97b562c695a", "content": "\ud83e\udd16 CVE-2026-0322 (CVSS 8.6): authenticated RCE with root privileges in the PAN-OS management interface (PA/VM-Series, Panorama). Actively exploited. Patches out for 12.2/12.1/11.2/11.1/10.2.\nhttps://thehackernews.com/2026/10/palo-alto-networks-patches-pan-os.html", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mxwkztugvg2t"}, {"timestamp": "2026-10-15T18:15:50.112Z", "date_only": false, "value": "2026-10-15T18:15:50.112562Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxwo6sifl22s", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "7afc27a9-86d8-4f42-bb66-1b83bf942ff6", "content": "\ud83d\udee1\ufe0f Most-discussed CVEs on Bluesky, last 24h\n\n1. CVE-2026-0322 \u00b7 30 people \ud83d\udd25\n2. CVE-2026-76519 \u00b7 30 people \ud83d\udd25\n3. CVE-2026-96951 \u00b7 11 people \ud83d\udd25\n4. CVE-2026-105133 \u00b7 10 people \ud83d\udd25\n5. CVE-2026-105134 \u00b7 8 people \ud83d\udd25\n\n\ud83d\udd25 = on CISA's Known Exploited list \u00b7 details in the thread \ud83e\uddf5", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxwo6sifl22s"}, {"timestamp": "2026-10-15T18:15:50.578Z", "date_only": false, "value": "2026-10-15T18:15:50.578494Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxwo6sl3j22s", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "749270f2-e9cf-49ea-8b40-fd270718e427", "content": "1. CVE-2026-0322 \u00b7 30 people \ud83d\udd25\n\ud83d\udfe7 High 8.6 \u00b7 Palo Alto Networks Cloud NGFW\n\nPAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxwo6sl3j22s"}, {"timestamp": "2026-10-15T18:32:17Z", "date_only": false, "value": "2026-10-15T18:32:17Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9FH3-97MP-7WMV", "record": "GHSA-9FH3-97MP-7WMV", "field": "modified"}, {"timestamp": "2026-10-15T18:52:23.144Z", "date_only": false, "value": "2026-10-15T18:52:23.144661Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxwqa5ua3224", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "8d9acced-e37d-45ce-b566-530d4ae89fe0", "content": "Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks\n\nPalo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls. [...]\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxwqa5ua3224"}, {"timestamp": "2026-10-15T19:02:22.901Z", "date_only": false, "value": "2026-10-15T19:02:22.901527Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxwqs267yf2q", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "be36c5a0-2401-49a9-a3be-ee2f4e709f96", "content": "PAN-OS \u306e\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u300cCVE-2026-0322\u300d\u304c\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u308b\n\nPalo Alto Networks \u306f\u6700\u8fd1\u3001\u4f01\u696d\u5411\u3051\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u306b\u5bfe\u3057\u3066\u5b9f\u969b\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u91cd\u5927\u306a\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u3092\u516c\u8868\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u6e08\u307f\u306e\u653b\u6483\u8005\u304c root \u6a29\u9650\u3067\u4efb\u610f\u306e\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3067\u304d\u307e\u3059\u3002\u305d\u306e\u7d50\u679c\u3001\u653b\u6483\u8005\u306f\u5883\u754c\u9632\u5fa1\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u306e\u904b\u7528\u3092\u5b8c\u5168\u306b\u638c\u63e1\u3067\u304d\u308b\u6050\u308c\u304c\u3042\u308a\u307e\u3059\u3002", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxwqs267yf2q"}, {"timestamp": "2026-10-15T19:03:24.645Z", "date_only": false, "value": "2026-10-15T19:03:24.645444Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3mxwqtujgmi2e", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "06e1b464-e79a-4c09-8ffa-05cb117ec3af", "content": "Paloalto\u306e\u8106\u5f31\u6027\u60c5\u5831 \u300cCVE-2026-0322 PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface (Severity: HIGH)\u300d\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\u3002\n\u2192 https://security.paloaltonetworks.com/CVE-2026-0322", "url": "https://bsky.app/profile/ripjyr.bsky.social/post/3mxwqtujgmi2e"}, {"timestamp": "2026-10-15T20:00:02Z", "date_only": false, "value": "2026-10-15T20:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2026-0322", "field": "timestamps.recorded_at", "uuid": "40d2e2f7-ac17-4396-8813-5c3c81b83e5d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-15T20:00:42.724Z", "date_only": false, "value": "2026-10-15T20:00:42.724640Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/40d2e2f7-ac17-4396-8813-5c3c81b83e5d", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "ec024fcb-499c-4ec2-a7d1-22c29ea3fa3a", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/40d2e2f7-ac17-4396-8813-5c3c81b83e5d"}, {"timestamp": "2026-10-15T20:14:38.689Z", "date_only": false, "value": "2026-10-15T20:14:38.689180Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxwutatals24", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "9961b5c6-08f7-4be6-b6d4-25ecf1300583", "content": "Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation\n\nPalo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation.\n\nThe vulnerability, tracked as CVE-2026-0322 (CVSS score:\u2026\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxwutatals24"}, {"timestamp": "2026-10-16T01:30:22.255Z", "date_only": false, "value": "2026-10-16T01:30:22.255210Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/guptadeepak.com/post/3mxxghsji232z", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "e2cad29a-cd11-4c66-9156-6cc98c440504", "content": "PAN-OS CVE-2026-0322 gives root through the management interface, and it is being exploited.\n\nThe catch: it needs admin credentials.\n\nPatch it, then fix the real control: phishing-resistant MFA for firewall admins and no management plane on untrusted networks.", "url": "https://bsky.app/profile/guptadeepak.com/post/3mxxghsji232z"}, {"timestamp": "2026-10-16T02:01:07.293Z", "date_only": false, "value": "2026-10-16T02:01:07.293525Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sansisc.bsky.social/post/3mxxi6shly524", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "2ffc0462-f202-4204-829f-ca8c6a342262", "content": "SANS Stormcast Friday, October 16th, 2026: Panchan Crypto Mining Worm; Exploited 0-Days in Cisco Secure Email Gateway (CVE-2026-76519), Palo Alto PAN-OS (CVE-2026-0322) and Ivanti Connect Secure\n https://isc.sans.edu/podcastdetail/10140", "url": "https://bsky.app/profile/sansisc.bsky.social/post/3mxxi6shly524"}, {"timestamp": "2026-10-16T02:37:06.740Z", "date_only": false, "value": "2026-10-16T02:37:06.740670Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mxxk75xyd22b", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "15d8ec8c-d166-412b-a968-8087ff566bb8", "content": "\ud83d\udccc CVE-2026-0322 - A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS\u00ae software enables an authenticated attacker with ... https://www.cyberhub.blog/cves/CVE-2026-0322", "url": "https://bsky.app/profile/cyberhub.blog/post/3mxxk75xyd22b"}, {"timestamp": "2026-10-16T03:00:10.666Z", "date_only": false, "value": "2026-10-16T03:00:10.666077Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mxxlifdudc2o", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "65817498-3dbe-4cfc-993d-81cf215c0902", "content": "\u3010\u7dca\u6025\u3011Palo Alto PAN-OS \u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\uff08CVE-2026-0322 / CVSS 8.6\uff09\n\n\u7ba1\u7406\u753b\u9762\u304b\u3089\u8a8d\u8a3c\u6e08\u307f\u306e\u653b\u6483\u8005\u304croot\u6a29\u9650\u3067\u30b3\u30fc\u30c9\u5b9f\u884c\u3002\u30e1\u30fc\u30ab\u30fc\u306f\u60aa\u7528\u3092\u78ba\u8a8d\u6e08\u307f\u3067\u56de\u907f\u7b56\u306a\u3057\u3002\n\u5bfe\u51e6: \u7ba1\u7406\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u3092\u5185\u90e8IP\u306b\u9650\u5b9a\u3057\u3001\u4fee\u6b63\u7248\u3078\u66f4\u65b0\u3002\n\nforsmile.jp/articles/pal...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #CVE", "url": "https://bsky.app/profile/forsmile.jp/post/3mxxlifdudc2o"}, {"timestamp": "2026-10-16T03:52:42.381Z", "date_only": false, "value": "2026-10-16T03:52:42.381912Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/trustlist.bsky.social/post/3mxxogd6njk2v", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "ccaa2f03-4b1d-4ee2-a714-7bcc73c6b5fc", "content": "News 4/40\nPalo Alto Networks fixes exploited root-level flaw in PAN-OS\n\nThe company found CVE-2026-0322 itself, saw very limited attacks from three IP addresses, and lists no workaround. One fix, for 11.2.16, was still due on 15 October.\n\n#infosec #cybersecurity\ntrustlist.uk/news/palo-alto-pan\u2026", "url": "https://bsky.app/profile/trustlist.bsky.social/post/3mxxogd6njk2v"}, {"timestamp": "2026-10-16T06:18:47.187Z", "date_only": false, "value": "2026-10-16T06:18:47.187410Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mxxwlkash52j", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "628de059-c9b1-4d8a-a26c-17d359fc334f", "content": "Top 3 CVE for last 7 days:\nCVE-2026-92392: 65 interactions\nCVE-2026-104935: 46 interactions\nCVE-2026-97229: 38 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-0322: 21 interactions\nCVE-2026-99999: 15 interactions\nCVE-2026-102764: 14 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mxxwlkash52j"}, {"timestamp": "2026-10-16T06:23:13.224Z", "date_only": false, "value": "2026-10-16T06:23:13.224135Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mxxwrxdo5ssu", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "74cace35-5c53-4475-83f8-da54531b45b9", "content": "PAN-OS\u306eRCE\u8106\u5f31\u6027\u3001\u30bc\u30ed\u30c7\u30a4\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u308b\uff1aCVE-2026-0322 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/48098/", "url": "https://bsky.app/profile/shiojiri.com/post/3mxxwrxdo5ssu"}, {"timestamp": "2026-10-16T06:43:08.103Z", "date_only": false, "value": "2026-10-16T06:43:08.103678Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxxxx3n3xl2f", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "db009a2b-42c6-4bb6-a67a-deaf277a0418", "content": "CISA\u3001Palo Alto PAN-OS \u306e\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u8b66\u544a \u30eb\u30fc\u30c8\u6a29\u9650\u306e\u596a\u53d6\u304c\u53ef\u80fd\u306b\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001Palo Alto Networks \u306e PAN-OS \u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027\u3092\u3001\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3068\u3057\u3066\u300c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u300d\u306b\u8ffd\u52a0\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u306f CVE-2026-0322 \u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u307e\u3059\u3002 \u3053\u306e\u8106\u5f31\u6027\u3092", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxxxx3n3xl2f"}, {"timestamp": "2026-10-16T07:23:03.909Z", "date_only": false, "value": "2026-10-16T07:23:03.909930Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mxy26gykss2q", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "9e2c01d5-e189-4111-82ce-47f1b0a7761d", "content": "[1/2] PAN-OS CVE-2026-0322 (CVSS 4.0 8.6): RCE come root dalla management interface, sfruttamento \"molto limitato\", in CISA KEV (deadline FCEB 17/10). Serve auth + accesso di rete alla mgmt. PA/VM-Series e Panorama. #infosec #PaloAlto", "url": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mxy26gykss2q"}, {"timestamp": "2026-10-16T07:23:04.798Z", "date_only": false, "value": "2026-10-16T07:23:04.798569Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mxy26h2lbc2q", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "5620bb32-b038-4963-b8c7-f9e23be9e72b", "content": "[1/2] PAN-OS CVE-2026-0322 (CVSS 4.0 8.6): RCE come root dalla management interface, sfruttamento \"molto limitato\", in CISA KEV (deadline FCEB 17/10). Serve auth + accesso di rete alla mgmt. PA/VM-Series e Panorama. #infosec #PaloAlto", "url": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mxy26h2lbc2q"}, {"timestamp": "2026-10-16T10:26:20.310Z", "date_only": false, "value": "2026-10-16T10:26:20.310634Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxyeg7bnqk24", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "aa0bd263-e474-4406-933b-0e97075b0f38", "content": "CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products\n\nThe US Cybersecurity and Infrastructure Security Agency (CISA) has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-0322, a high-severity remote code execution (RCE) vul\u2026\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxyeg7bnqk24"}, {"timestamp": "2026-10-16T11:13:03.956Z", "date_only": false, "value": "2026-10-16T11:13:03.956370Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/yogsec.bsky.social/post/3mxygzovups2z", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "8340b17e-5b47-4261-98cf-9f99594c4f64", "content": "CVE-2026-0322\n\nPalo Alto Networks PAN-OS management interface OS command injection. An authenticated attacker with access to the management web interface can execute arbitrary commands as root on the firewall.\n\nsecurity.paloaltonetworks.com/CVE-2026-0322\n\n#CVE #RemoteCodeExecution #FirewallSecurity", "url": "https://bsky.app/profile/yogsec.bsky.social/post/3mxygzovups2z"}, {"timestamp": "2026-10-16T13:59:40.875Z", "date_only": false, "value": "2026-10-16T13:59:40.875557Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117450943982966458", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "d17676f6-45ff-41f6-aa4e-8ce1e1aa0a86", "content": "\ud83d\udcf0 CISA Adds Four Actively Exploited Flaws to KEV Catalog\nCISA adds 4 actively exploited vulnerabilities to its KEV catalog. Flaws in Palo Alto PAN-OS (CVE-2026-0322), Cisco SEG (CVE-2026-76519), & AhsayCBS (CVE-2026-105133/4) require immediate patching. #CISA #KEV #Vulnerability\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-adds-four-exploited-vulnerabilities-to-kev-catalog-october-2026/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "url": "https://mastodon.social/ap/users/115426718704364579/statuses/117450943982966458"}, {"timestamp": "2026-10-16T14:00:11.069Z", "date_only": false, "value": "2026-10-16T14:00:11.069535Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mxyqel2wc32n", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "0146e469-c41c-41e9-8a5f-b36f57b78fbb", "content": "CISA adds 4 actively exploited vulnerabilities to its KEV catalog. Flaws in Palo Alto PAN-OS (CVE-2026-0322), Cisco SEG (CVE-2026-76519), & AhsayCBS (CVE-2026-105133/4) require immediate patching. #CISA #KEV #Vulnerability\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "url": "https://bsky.app/profile/netsecio.bsky.social/post/3mxyqel2wc32n"}, {"timestamp": "2026-10-16T18:15:03.589Z", "date_only": false, "value": "2026-10-16T18:15:03.589000Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxz6mcnzis2l", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "dda0e203-8443-4b46-83ca-fd80e09af905", "content": "\ud83d\udee1\ufe0f Most-discussed CVEs on Bluesky, last 24h\n\n1. CVE-2026-99999 \u00b7 43 people\n2. CVE-2026-102764 \u00b7 27 people \ud83d\udd25\n3. CVE-2026-0322 \u00b7 13 people \ud83d\udd25\n4. CVE-2026-76519 \u00b7 11 people \ud83d\udd25\n5. CVE-2026-110447 \u00b7 10 people\n\n\ud83d\udd25 = on CISA's Known Exploited list \u00b7 details in the thread \ud83e\uddf5", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxz6mcnzis2l"}, {"timestamp": "2026-10-16T18:15:04.989Z", "date_only": false, "value": "2026-10-16T18:15:04.989658Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxz6mcvtis2l", "record": "CVE-2026-0322", "field": "creation_timestamp", "uuid": "aaf50fd3-7cbe-48b2-bab7-f2d3713a637f", "content": "3. CVE-2026-0322 \u00b7 13 people \ud83d\udd25\n\ud83d\udfe7 High 8.6 \u00b7 Palo Alto Networks Cloud NGFW\n\nPAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxz6mcvtis2l"}, {"timestamp": "2026-10-17T00:00:00Z", "date_only": true, "value": "2026-10-17", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2026-0322", "field": "evidence.0.details.due_date", "uuid": "029817d3-1c77-4d2b-9d76-3a75b5a7aea8", "status": {"status_reason": "confirmed", "exploited": true}}]}