Palo Alto Networks warns of critical RCE zero-day exploited in attacks

**Palo Alto zero-day RCE actively exploited:** Palo Alto Networks warned of an unauthenticated remote command execution vulnerability (PAN-SA-2024-0015 / CVE-2024-0012, CVSS 9.3) in NGFW management interfaces that is being exploited against internet-exposed devices; scans report roughly 8,700–11,180 exposed interfaces, the vendor recommends immediately restricting management access and placing interfaces behind VPNs while fixes and signatures are prepared.