Guyana’s National Computer Incident Response Team (CIRT) issued an advisory on October 15 about PAN-OS vulnerability CVE-2026-0322. The remote code execution (RCE) flaw in the management interface lets an authenticated attacker with network access run code with root privileges, the highest level of control, on the firewall.
The risk is limited to PAN-OS software on PA-Series and VM-Series firewalls and Panorama management systems. Authenticated administrators control the system, so accessibility and account security matter alongside the software version. No Caribbean cases of a related breach have been identified, and there are no known reports measuring regional exposure.
Guyana’s advisory recommends that users and administrators review the system updates and apply them where necessary. Organizations in other Caribbean jurisdictions should establish whether they use the affected products before treating the warning as applicable to them. Palo Alto Networks also recommends minimizing the issue by restricting management interface access to trusted internal addresses; there is no known workaround.
Business leaders should obtain documentation from the responsible IT team or provider that includes the installed release, management exposure and any investigation warranted by suspicious activity.
TAKEAWAY: Ask your firewall owner to verify the applicable fixed release, management access restrictions and any findings requiring investigation.
WHY THIS MATTERS: For Caribbean users of the affected PAN-OS systems, limited confirmed exploitation of this vulnerability makes firewall administration and remediation an immediate operational priority.
