Palo Alto Networks has fixed a high-severity XML-processing flaw. The same request can crash VM-Series systems or enable root-level code execution on affected PA-Series hardware.