A critical, unauthenticated remote code execution vulnerability (CVE-2026-0300, CVSS 9.3) in Palo Alto Networks PAN-OS firewalls is being actively exploited by a state-sponsored threat group. Patches are not yet available. Here is what SMBs need to do right now to protect their networks.