Palo Alto Networks Patches Critical Zero-Day Firewall Bug

Palo Alto Networks has warned of several critical vulnerabilities in its Expedition firewall management utility — notably an unauthenticated remote command injection — that are being actively exploited; the vendor released patches and urged customers to restrict management interface access. CISA added multiple Expedition flaws to its Known Exploited Vulnerabilities list, and ShadowServer reported thousands of exposed PAN-OS management instances potentially at risk.