A
仿¥äž
Palo Alto Networksã®PAN-OSã«ãããŠãèªèšŒãªãã§ãªã¢ãŒãã³ãŒãå®è¡ïŒRCEïŒãå¯èœãªãŒããã€è匱æ§ïŒCVE-2026-0322ïŒ
ð äžèšã§ãããš
Palo Alto Networksã®PAN-OSã«ãããŠãèªèšŒãªãã§ãªã¢ãŒãã³ãŒãå®è¡ïŒRCEïŒãå¯èœãªãŒããã€è匱æ§ïŒCVE-2026-0322ïŒãå ±åãããŸãããæ»æè
ãç¹å¥ã«çް工ãããããã¯ãŒã¯ãªã¯ãšã¹ããéä¿¡ããããšã§ããã¡ã€ã¢ãŠã©ãŒã«ããã€ã¹ãå¶åŸ¡ãããããã¯ãŒã¯å
šäœãæ¯é
ããããªã¹ã¯ããããŸãããã§ã«æ»æã«å©çšãããŠããããšã確èªãããŠãããè¿
éãªå¯Ÿå¿ãæ±ããããŠããŸãã
ð該åœå€å®
- Palo Alto Networks瀟ã®PA-Seriesãã¡ã€ã¢ãŠã©ãŒã«ãå°å ¥ããŠãã
- ãã¡ã€ã¢ãŠã©ãŒã«ã®OSã§ãããPAN-OSããå©çšããŠãã
- PAN-OSã®ããŒãžã§ã³ãã12.2ãã§ããããã€ã12.2.4ãããåã®ããŒãžã§ã³ã§ãã
äžèšãããã«ã該åœããªã â é芳ã§OK
â
è©²åœæã®å¯Ÿå¿
圱é¿ãåããPAN-OSããŒãžã§ã³ïŒ12.2ã®12.2.4æªæºãªã©ïŒã確èªããéããã«ææ°ã®ä¿®æ£æžã¿ããŒãžã§ã³ãžã¢ããããŒãããããšãæšå¥šããŸãã
ð§ ã¡ãŒã«æ¡ãèŠã (管çè åã)
â ïž ãã㯠AI ãçæããåèäŸã§ããé
ä¿¡åã«å¿
ãå
容ãã確èªã®ããã貎瀟ã®ç¶æ³ã«åãããŠç·šéããŠãå©çšãã ãããå®éã®è¢«å®³ç¶æ³ãèªç€Ÿã®å©çšç°å¢ãèžãŸãã倿ã¯ã貎瀟ã®ã»ãã¥ãªãã£è²¬ä»»è
ã«ã確èªãã ããã
ä»¶å: ãå
±æãPalo Alto Networks PAN-OS CVE-2026-0322 察å¿ã«ã€ããŠ
ãç²ãããŸã§ããPAN-OSã®ãŒããã€è匱æ§ã«é¢ããæ å ±å ±æã§ãã
â æŠèŠ
PAN-OSã«ãããŠãèªèšŒãªãã§ãªã¢ãŒãã³ãŒãå®è¡ïŒRCEïŒãå¯èœãªèåŒ±æ§ CVE-2026-0322 (CVSS v4.0: 8.6) ãçºèŠãããŸãããç¹å¥ã«çް工ããããªã¯ãšã¹ãã«ãããæ»æè ãããã€ã¹ãå®å šã«å¶åŸ¡ããå¯èœæ§ããããŸããæ¢ã«æªçšã確èªãããŠãããããæ¥µããŠå±éºãªç¶æ ã§ãã
â 圱é¿ç¯å²
- 察象補å: Palo Alto Networks PA-Series Firewalls
- 察象ããŒãžã§ã³: PAN-OS 12.2 (12.2.4 æªæº)
â å¯Ÿå¿æé
1. 皌åäžã®PAN-OSããŒãžã§ã³ã確èªããŠãã ããã
2. 圱é¿ãåããããŒãžã§ã³ã§ããå Žåãéããã«ææ°ã®ä¿®æ£æžã¿ããããé©çšããŠãã ããã
3. å€éšããã®äžèŠãªç®¡çã¢ã¯ã»ã¹ãå¶éãããŠãããå確èªããŠãã ããã
â åèæ å ±
- ThaiCERT ã¢ããã€ã¶ãª
- Palo Alto Networks å ¬åŒã»ãã¥ãªãã£ã¢ããã€ã¶ãª
察å¿åªå 床: é«
å¯Ÿå¿æé: è³æ¥
ãç²ãããŸã§ããPAN-OSã®ãŒããã€è匱æ§ã«é¢ããæ å ±å ±æã§ãã
â æŠèŠ
PAN-OSã«ãããŠãèªèšŒãªãã§ãªã¢ãŒãã³ãŒãå®è¡ïŒRCEïŒãå¯èœãªèåŒ±æ§ CVE-2026-0322 (CVSS v4.0: 8.6) ãçºèŠãããŸãããç¹å¥ã«çް工ããããªã¯ãšã¹ãã«ãããæ»æè ãããã€ã¹ãå®å šã«å¶åŸ¡ããå¯èœæ§ããããŸããæ¢ã«æªçšã確èªãããŠãããããæ¥µããŠå±éºãªç¶æ ã§ãã
â 圱é¿ç¯å²
- 察象補å: Palo Alto Networks PA-Series Firewalls
- 察象ããŒãžã§ã³: PAN-OS 12.2 (12.2.4 æªæº)
â å¯Ÿå¿æé
1. 皌åäžã®PAN-OSããŒãžã§ã³ã確èªããŠãã ããã
2. 圱é¿ãåããããŒãžã§ã³ã§ããå Žåãéããã«ææ°ã®ä¿®æ£æžã¿ããããé©çšããŠãã ããã
3. å€éšããã®äžèŠãªç®¡çã¢ã¯ã»ã¹ãå¶éãããŠãããå確èªããŠãã ããã
â åèæ å ±
- ThaiCERT ã¢ããã€ã¶ãª
- Palo Alto Networks å ¬åŒã»ãã¥ãªãã£ã¢ããã€ã¶ãª
察å¿åªå 床: é«
å¯Ÿå¿æé: è³æ¥
Subject: [Urgent] Palo Alto Networks PAN-OS CVE-2026-0322 Mitigation
Dear IT/Security Team,
We are sharing critical information regarding a zero-day vulnerability in PAN-OS.
â Overview
CVE-2026-0322 (CVSS v4.0: 8.6) is an unauthenticated Remote Code Execution (RCE) vulnerability in Palo Alto Networks PAN-OS. Attackers can send specially crafted network requests to gain unauthorized control over the firewall device. This vulnerability is currently being exploited in the wild.
â Scope
- Affected Product: Palo Alto Networks PA-Series Firewalls
- Affected Versions: PAN-OS 12.2 (versions prior to 12.2.4)
â Action Plan
1. Verify the current PAN-OS version running on your devices.
2. If affected, immediately update to the latest patched version (12.2.4 or newer).
3. Review and restrict management access from the public internet.
â Reference
- ThaiCERT Advisory
- Palo Alto Networks Official Security Advisory
Priority: High
Deadline: Immediate
Dear IT/Security Team,
We are sharing critical information regarding a zero-day vulnerability in PAN-OS.
â Overview
CVE-2026-0322 (CVSS v4.0: 8.6) is an unauthenticated Remote Code Execution (RCE) vulnerability in Palo Alto Networks PAN-OS. Attackers can send specially crafted network requests to gain unauthorized control over the firewall device. This vulnerability is currently being exploited in the wild.
â Scope
- Affected Product: Palo Alto Networks PA-Series Firewalls
- Affected Versions: PAN-OS 12.2 (versions prior to 12.2.4)
â Action Plan
1. Verify the current PAN-OS version running on your devices.
2. If affected, immediately update to the latest patched version (12.2.4 or newer).
3. Review and restrict management access from the public internet.
â Reference
- ThaiCERT Advisory
- Palo Alto Networks Official Security Advisory
Priority: High
Deadline: Immediate