Palo Alto Networks patches two firewall zero-days used in attacks

Palo Alto Networks released fixes for two actively exploited PAN-OS zero-days — CVE-2024-0012 (management web interface authentication bypass enabling administrator access) and CVE-2024-9474 (privilege escalation to root) — with observed exploitation against internet-exposed management interfaces, thousands of exposed devices reported by Shadowserver/Shodan, published IOCs, and CISA adding the issues to its Known Exploited Vulnerabilities Catalog and mandating rapid patching.