Multiple Vulnerabilities in Palo Alto PAN-OS Could Allow for Authentication Bypass

Multiple critical vulnerabilities were identified in Palo Alto PAN-OS, including an authentication bypass (CVE-2024-0012) that enables unauthenticated attackers with network access to the management web interface to obtain administrator privileges, and a privilege escalation (CVE-2024-9474) allowing administrators to gain root privileges. Exploitation could permit full firewall compromise; mitigation includes restricting management web interface access to trusted internal IP addresses.