Palo Alto updates advisory about firewall bug after discovering exploitation attempts

Palo Alto Networks has warned that PAN-SA-2024-0015 (CVE-2024-0012), a critical unauthenticated remote command-execution flaw in its NGFW management interfaces, is being actively exploited; researchers found thousands of internet-exposed management IPs, CISA and other organizations issued notices, and the vendor advises restricting management access to trusted internal IPs while preparing fixes and additional threat-prevention guidance.