Palo Alto Networks
Every ZeroDayFeed story on Palo Alto Networks — across breaches, zero-days, ransomware, patches, policy, and industry, newest first.
-
Zero-Days & Exploits
Attackers chain two AhsayCBS flaws for SYSTEM access; first patch failed, CISA deadline passed
Attackers are chaining an AhsayCBS authentication bypass with a command injection flaw to get SYSTEM-level access, plant webshells and mine crypto. Ahsay says its 10.3.4.0 fix was incomplete, and CISA's October 17 deadline for federal agencies has passed.
-
Zero-Days & Exploits
Palo Alto patches exploited PAN-OS management-interface flaw that grants root (CVE-2026-0322)
Palo Alto Networks has patched CVE-2026-0322, a PAN-OS management-interface code-injection flaw that is being exploited in a very limited number of attacks. It gives authenticated attackers root on PA-Series and VM-Series firewalls and on Panorama, and CISA set an Oct 17 deadline for agencies to patch and check for compromise.
-
Zero-Days & Exploits
CISA orders patching of exploited Fortinet path-traversal flaw tied to stealthy FortiGate implant at telecom
CISA added Fortinet's CVE-2025-61624 to its KEV catalog with an Oct 19 deadline and a forensic-triage requirement, as Palo Alto Networks links the flaw to a long-running telecom intrusion using a memory-resident FortiGate implant it calls PeerStitch.
